Recruitment Directory's Blog - Australia's #1 Recruitment Technology Blog!
Do you virus scan all candidate resumes and other documents before you open them? Chances are YOU may be the perfect candidate these people are looking for.
I have seen a number of these emails this week targeting recruiters. The email sender and contents looks legit and it is a very simple message saying "please review my CV" accompanied by an attachment with the word "resume" in it.
Guess what. When you open the ZIP attachment, you come across another file which looks like it is the candidates resume. But it is actually an executable program (exe) containing a trojan horse called "trojan.sasfis".
The email (and attachment) is not immediately picked up by anti virus software until you extract or run the executable program within the ZIP file.
The virus has been around for a few months and can allow an outside attacker access to personal information or other stored data on the affected computer.
Trojan.Sasfis can compromise the computer that it is installed on allowing a remote attacker to gain access. Trojan.Sasfis should be removed immediately after detection to limit further destruction. You can
read a summary and technical details of the threat here.
UPDATE 13/5/2010 Websense Security Labs have confirmed the malware spam "Please review my CV, Thank you!". You can
read the full assessment here.
Article URL: http://www.recruitmentdirectory.com.au/Blog/please-review-my-cv-trojan-horse-a363.html
Article Tags: virus resume job board recruitment website antivirus software resume virus security trojan horse trojan sasfis candidate resume 
Hide Comments (3)
Back to Menu
There are also a few going round where the Resume is an HTML file - also worth double checking those. Be aware!
Also if you received a file, which you are not 100% sure about - use a free service provided by VirusTotal http://www.virustotal.com to scan this suspicious file before opening it. VirusTotal have multiple antiviruses available for you to scan this file automatically in parallel to provide you with an aggregated result on a single web page.