One more attack over Monster.com

Nov 21, 2007 10:44 GMT  ·  By

It's been a while since Monster.com left out the news and remained focused on its businesses. But today, the famous employment website is again one of the main news topics as it got hacked once again after a few months of calm and quiet atmosphere. Roger Thompson of Exploit Prevention Labs wrote that only a single subdomain of Monster.com was affected by the attack. Codenamed Monster Company Boulevard, the hacked page affected several companies such as Eddie Bauer, GMAC Mortgage, BestBuy, Toyota Financial and Tricounties Bank, Mr. Thompson wrote. The employment service suffered an iFrame attack which seems to be gone as the webmasters managed to restore the pages and remove all traces of any hacker.

"We detect it as the Neosploit exploit package. It is fairly well encrypted, so it's not yet clear exactly what exploits are in use", Roger Thompson wrote on the website. "It is also not clear how many pages were affected, but it is likely that the attack was the same for all companies on the website, which _might_ turn out to be a pretty good set of Fortune 500."

The Register informed that users who attempted to visit the hacked website were redirected to a website equipped with some sort of malware which obviously was intended to harm the visitors' computers. It's not yet reported if the users could be protected by any piece of software installed on the systems.

This is not the first time when Monster.com turns into a real threat for the visitors' computers. A few months ago, the website was hacked and some of the users' credentials could have been stolen.

Monster.com has a traffic rank of 534 on Alexa and according to the same source, the service is online since 1994. Although the job management technologies are available in several countries, no less than 76.4 percent of the total traffic recorded by the website comes from the United States.