Most everyone has read in the news about Monster.com and USAJobs.gov (both career job seeking and posting sites) being illegally accessed and account data being taken. You can read the official notices posted by both of these entities by clicking the links below:
“Monster Database Security Breach Alert”
“Attention USAJobs Users”
Most of you are probably wondering, what’s the big deal? So what, someone has taken usernames, passwords and email addresses to a career site. Just change the password, as prompted or instructed, and you will be fine. Wrong!
I want my readers to please watch the short video below, from Sophos Labs (Graham Cluey’s Blog) about this specific case and what it should teach us.
NOTE: I have the video link configured so that when you click on the graphic link below the video will open in a separate full screen window. At the full screen window, click on the “play button” in the bottom left corner.
This video demonstrates how other web site accounts can be compromised, as a result of maintaining the same password for each account we access (i.e. your banking, credit card, etc…). The video points out that over 41 percent of people use the same password for every account they access. From my experience, I say that percentage is even higher. I cannot stress the importance of practicing good password management.
To remind and educate about password management; and to provide you with a software tool to get you started, I encourage you to re-visit the post I composed titled:
“PASS-the-WORD”… Basic password management tips.”
I also would like to point out that this particular incident, with economic conditions being as such, demonstrates how low the cybercriminal will go to seek financial gain by stealing your identity.
clipped from vimeo.com
What the Monster.com security breach teaches us about passwords
by Sophos Labs
Hackers have stolen details on job seekers from recruit websites Monster.com and USAJobs.gov, bringing the risk of identity theft and phishing attacks.
Learn what you need to do to ensure that your website accounts aren’t compromised in this video by Sophos’s senior technology consultant Graham Cluley.
Read more on Graham Cluley’s blog at sophos.com/blogs/gc/g/2009/01/24/security-alert-monstercom
Get Clipmarks – The easiest way to email text, images and videos you find on the web.
[ CLICK HERE TO LEAVE A COMMMENT ]