US job website Monster.com has suffered an online attack with the personal data of hundreds of thousands of users stolen, says a security firm. A computer program was used to access the employers' section of the website using stolen log-in credentials.

Symantec said the log-ins were used to harvest user names, e-mail addresses, home addresses and phone numbers, which were uploaded to a remote web server.

The stolen data could be used to send phishing and spam e-mails.

"This remote server held over 1.6 million entries with personal information belonging to several hundred thousands of candidates, mainly based in the US, who had posted their resumes to the Monster.com website," reported Symantec.

Security breach

The firm has contacted Monster.com to inform them of the security breach.

Symantec said it had seen reports of phishing e-mails sent out to Monster.com users which were "very realistic" and contained "personal information of the victims".

The e-mail encouraged users to download a Monster Job Seeker Tool, which was in fact a program that encrypted files in their computer and left a ransom note demanding money for their decryption.

"To the best of our knowledge, this is not a hack of Monster's security, rather, legitimate customer credentials are being used to log in to the database," said Patrick Manzo, vice president of compliance and fraud prevention at Monster.

He added: "There have been reports of this as an issue of identify theft.

"We are not aware of any cases of identity theft. In fact, the information that is gathered from Monster is no different than that displayed in a phone book."

The program used to access Monster.com user data was a Trojan, which are commonly used to gain access to bank details, usernames and passwords.

More than 8,000 new variants of Trojans are found each month, according to internet security specialists Sophos.

Last year, a British nurse was blackmailed by hackers who had used a Trojan to access her personal e-mails.

They threatened to reveal personal details unless she paid them.

Symantec said users should always limit contact information posted to job websites and to use a disposable e-mail address.

"Never disclose sensitive details such as your social security number, passport or driver's license numbers, bank account information to prospective employers until you have established they are legitimate," said the firm.

Source: BBC     Article: Monster attack steals user data
Published: Tuesday, 21 August 2007

---

Learn more about Search Engine Optimization, the most effective form of online advertising.

Search Engine Marketing is the fastest growing advertising medium in the world, projected to become 10x more powerful and influential than traditional media outlets such as: network television, cable television, local television, network radio, local radio, satellite radio, national newspapers, local newspapers, magazines, billboards, direct mail, telemarketing and more.

Discover the most powerful and effective form of advertising, Search Engine Optimization.

An aside for consideration are the segments of Search Engine Optimization. Clarification is required in terms of paid search marketing, sponsored search advertising, pay per click, email marketing (spam), and the foundation of strategic internet marketing: Organic Search Engine Optimization - Organic SEO in some circles also referred to as Natural Search Engine Optimization - Natural SEO.
 

---

Key Organic Search Engine Optimization Facts:

• Keyword search is the 2nd most popular online activity, rapidly approaching the popularity of email retrieval.
   
• 90% of all new website visitors are delivered by a major search engine and/or directory.
   
• 98% of all keyword search activity results are powered by the big 4 search engines: Google, Yahoo, MSN and AOL.
   
• Keyword search results on Google, Yahoo, MSN and AOL are all determined by a search engine spider and/or robot crawler.
   
• Recent internet marketing studies confirm that keyword searchers prefer the organic results at a 6 to 1 ratio vs. pay-per-click sponsored search advertising listings. 

---

Is your corporate website being found early and often on the keywords and keyword phrases that best describe your products, services and industry?

Harness the power that our proven organic search engine optimization technologies can provide...
Contact the Peak Positions Organic SEO consulting specialists today.

Learn more about our client roster, one of the strongest in the SEO industry, and more importantly discover why our client-focused Organic Search Engine Optimization company maintains the highest client retention rate in the SEO industry. 

"Our year over year order anniversary flowers revenues are climbing rapidly in a timid economy. If you are looking for an excellent SEO Company, we suggest Peak Positions" ... SEO Case Study