Trojan piggybacks on Firefox

[engine]

A new Trojan horse making the rounds has been installing itself as a Firefox extension, according to security company McAfee.

The FormSpy Trojan attacks computers that have already been infected with the Downloader-AXM Trojan, according to a security advisory McAfee issued Tuesday. Once FormSpy is executed, it installs itself as a component of the Firefox Web browser.

The FormSpy spyware then gleans sensitive information, such as credit card and bank account numbers, from the user's browser and forwards it to a malicious Web site. But this Trojan is capable of other tricks, as well, McAfee noted.

Trojan piggybacks on Firefox [news.com.com]

[coopster]

This is the important part:

The FormSpy Trojan attacks computers that have already been infected with the Downloader-AXM Trojan

... and how do you get the Downloader-AXM Trojan? McAfee has at least one report [vil.nai.com] (click the characteristics tab).

See this too at McAfee [vil.nai.com] (Symptoms tab) ...

Unintended installation of the following Mozilla Firefox extension component(s):

* NumberedLinks 0.9