More and more spammers are tuning into the high unemployment rate with bogus emails that purport to be responding to online resumes.
The latest comes disguised a request for an updated resume, presumably as seen on CareerBuilder.com:
Subject: Re: Job Interview
From: <crist.and@novaaldeotahotel.com.br>
Dear Employee,
Could I get an update on your resume? Your cooperation will be appreciated in this matter.
The resume we have on file for you is http://www.careerbuilder.com/ShareInfo/Resume.aspx?DID=J93JSN0382.
Best regards,
Cristian Anderson
We’ve seen this claim to come from the same sender at many different domains, including:
- From: <crist.and@novaaldeotahotel.com.br>
- From: <crist.and@horizonte.no>
- From: <crist.and@centrale.nl>
The catch is that while the hyper-linked text being displayed says you’ll go to a www.careerbuilder.com sever, the truth is these all link to an executable male-ware/virus file, typically named resume.exe an hosted by a variety of compromised servers.
Related posts:
- Thank you from Google! – Virus Trojan
- Online order for airplane ticket – Virus
- You’ve received a postcard – Active Virus
- Your friend invited you to twitter! – Virus
- Facebook “updated account agreement” Virus
Tags: virus