Monster phish

Just got a phishing scam in that purports to be from Monster.com.
Dear Monster Customer,

We were unable to process the recent messages on
your account. To ensure that your account is not
suspended, please check your information by clicking
here.

Monster Network Customer Service

The page it directed me to contained the JS/Stealus trojan, which, from the description:
JavaScript, which exploit[s] an Internet Explorer vulnerability resulting in Internet Explorer displaying one location in the Address bar, but actually loading the content from a different site.

Doesn't sound like it does anything itself, so I assume they actually want to get into people's Monster.com accounts...

Now, if I could just find a way to email Monster.com - they don't seem to have an email address to send to, just web forms.

Comments

No comments yet

Add Comments

You'll need to register to post comments.