Spyware Disguises Itself as Firefox Extension

[janestarz]

Today on Slashdot:

Spyware Disguises Itself as Firefox Extension
Posted by timothy on Thursday July 27, @06:42PM

"The antivirus specialists at McAfee have warned of a Trojan that disguises itself as a Firefox extension. The trojan installs itself as a Firefox extension, presenting itself as a legitimate existing extension called numberedlinks. It then begins intercepting passwords and credit card numbers entered into the browser, which it then sends to an external server. The most dangerous part of the issue is that it records itself directly into the Firefox configuration data, avoiding the regular installation and confirmation process."

Also, the comments on the article are enlightening and sometimes even funny. Basically, this is about spyware posing as a "Firefox extension", installed by a .exe you get sent by e-mail. And you know what to do with all those attachments and weird links you get sent by total strangers, right?
Right.
Anyway, none of the comments of other geeks is definite about where it comes from. Some claim it is from the Firefox webpage itself, others that it's sent by spam. Either way, take care in what you install, mmkay?

Comments

[steelweaver.livejournal.com]

The comments are usually fun to read.
However, I'm no longer amazed by the capacity of the average slashdot-reader to somehow make MCSE-bashing relevant to any topic discussed.