by Steve Earle | May 11, 2015 | Marketing, Newsletters
Many thanks to our friend Michael Scheidell of Security Privateers for alerting the Tech Hiring community to this danger.
The current shortage of qualified IT security professionals is affecting organizations across the United States, but now it seems that criminals are taking advantage of the booming job market in a new way: Proofpoint reports that cyber criminals have been infecting businesses with malware through fake job applications.
Combining “phishing and social engineering techniques in order to trick users into opening a malicious documentâ€, criminals have been uploading infected files to online job site CareerBuilder.com, which exploit “a memory corruption vulnerability for Word RTF (such as CVE-2014-1761, CVE-2012-0158, and others).â€
It may seem a labor-intensive way of attacking organizations, but because of this approach the “probability of the mail being delivered and opened is higherâ€. As Proofpoint notes, “recipients are likely to read them and open the attachments because not only are they legitimate emails from a reputable service, but these emails are expected and even desired by the recipient. Moreover, because of the way that resumes are circulated within an organization, once the document has been received by the owner of the job listing (often “hr@<company name>â€) it will be sent to the hiring manager, interviewers, and other stakeholders, who will open and read it as well. Taking advantage of this dynamic enables the attackers to move laterally through their target organization.â€
Having been alerted by Proofpoint, CareerBuilder “took prompt action to address the issueâ€, but other recruitment sites could still be vulnerable. We recommend you exercise caution when opening attachments from unknown sources – especially if you’re recruiting. Once infected with malware, organizations are at significant risk of data breach, or wider compromise.
by: Neil Ford
by joshuapiller | May 11, 2015 | Job Opportunities, Marketing, Newsletters
You are invited to Interview Interns at the 2015 NAF Annual Student / Industry Conference – post your company’s internship positions and schedule on-site interviews through the GetMyInterns.org app.
by joshuapiller | May 11, 2015 | Events, Marketing, Newsletters
Now available, 15% discount to ATS2015 – Just use Promo Code ‘PARTNERSF15’ at Eventbrite Registration
Call for Volunteers:
Preparations for ATS2015 are going well and we’re looking to add several volunteers to the proceedings. If you are interested in volunteering, please use the link below/
Volunteer link here http://goo.gl/M6Idht.
Podcast promotion:
We were featured on a Podcast last week, had a lot of fun doing it!
Here’s the link if you are interested in hearing us promote ATS2015 http://goo.gl/ljpkCS
Visit the event website: http://southfaa.com/ats2015/
About Agile Transformation Summit:
You don’t have to travel far to meet the nationally recognized Agile thought leaders, Agile Transformation Summit brings them to our neighborhood for one high energy day in May! Network with senior executives from South Florida companies and IT professionals to learn about their Agile journey. We set the bar high last year with the caliber of the program, and this year the bar is even higher! Cutting edge talks that you would only see in the major global conferences, interactive Agile games, structured networking events, and an executive track; all accessible at no additional cost! Conference proceeds will contribute to the Emerging Technology Scholarship Fund at Nova Southeastern University for students with a high GPA and financial need.
by joshuapiller | May 11, 2015 | Events, Marketing, Newsletters
Only 5 weeks away from SQL Saturday South Florida edition! to be held on Saturday June 13th. at Nova Southeastern University.
Have you registered yet? Save the date and tell your colleagues about it too… #SQLSatSoFla #SQLSat379
CALL FOR SPEAKERS IS OPEN UNTIL MAY 1st., 2015
Remember if you’d like to volunteer for this event, check that option when you register, THANK YOU!!!
SQLSaturday is a training event for SQL Server professionals and those wanting to learn about SQL Server. This event will be held Jun 13 2015 at 3301 College Ave, Davie, FL 33314. Admittance to this event is free, all costs are covered by donations and sponsorships. Please register soon as seating is limited, and let friends and colleagues know about the event.
*We do ask that you consider to OPT-IN for the Sponsors of this event. Without their assistance, we cannot bring this FREE event to you. You can always opt-out if and when they contact! Thank you for your consideration.
