Welcome to WebmasterWorld Guest from 18.204.227.250

Forum Moderators: open

Message Too Old, No Replies

Trojan piggybacks on Firefox

     
3:45 pm on Jul 27, 2006 (gmt 0)

Administrator from GB 

WebmasterWorld Administrator engine is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:May 9, 2000
posts:26375
votes: 1036


A new Trojan horse making the rounds has been installing itself as a Firefox extension, according to security company McAfee.

The FormSpy Trojan attacks computers that have already been infected with the Downloader-AXM Trojan, according to a security advisory McAfee issued Tuesday. Once FormSpy is executed, it installs itself as a component of the Firefox Web browser.

The FormSpy spyware then gleans sensitive information, such as credit card and bank account numbers, from the user's browser and forwards it to a malicious Web site. But this Trojan is capable of other tricks, as well, McAfee noted.

Trojan piggybacks on Firefox [news.com.com]

5:37 pm on July 27, 2006 (gmt 0)

Administrator

WebmasterWorld Administrator coopster is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:July 31, 2003
posts:12555
votes: 3


This is the important part:


The FormSpy Trojan attacks computers that have already been infected with the Downloader-AXM Trojan

... and how do you get the Downloader-AXM Trojan? McAfee has at least one report [vil.nai.com] (click the characteristics tab).

See this too at McAfee [vil.nai.com] (Symptoms tab) ...


Unintended installation of the following Mozilla Firefox extension component(s):

* NumberedLinks 0.9