Spyware Disguises Itself as Firefox Extension

Juha-Matti Laurio writes "The antivirus specialists at McAfee have warned of a Trojan that disguises itself as a Firefox extension. The trojan installs itself as a Firefox extension, presenting itself as a legitimate existing extension called numberedlinks. It then begins intercepting passwords and credit card numbers entered into the browser, which it then sends to an external server. The most dangerous part of the issue is that it records itself directly into the Firefox configuration data, avoiding the regular installation and confirmation process."

Comments

FUD

[knifeyspooney]

But the malicious extension can only bypass the normal Firefox checks if your system is already infected with a friendly virus, which will only infect your system through Internet Explorer!

Re:Not a vulnerability.

[$RANDOMLUSER]

Exactly. Just chalk this up as more McAfee anti-OSS FUD.