Miscreants have created an item of spyware targeted at Firefox users.

The malware poses as an Adobe Flash Player update but in reality its designed to log a user's browsing history, in particular their Google search queries within Firefox. This information is uploaded to a hacker-controlled server.

The spyware creates a Firefox add-on called "Adobe Flash Player 0.2", which has nothing to do with either Adobe or Mozilla. More on the threat can be found in a write-up by Trend, which includes screenshots, here.

Malware targeting Firefox users is rare but not unprecedented. Strains of malware that latch onto Internet Explorer, Microsoft's Swiss-cheese browser, are much more commonplace. Common IE-related malware trickery involves exploiting unpatched security vulns to download malware onto vulnerable machines via drive-by download attacks. ®

Related stories

• Malvertisers slapped by Microsoft lawsuits (18 September 2009)
• Firefox update quells quartet of security vulns (10 September 2009)
• Apple sneaks malware protection into Snow Leopard (25 August 2009)
• Mozilla squashes critical bugs in Firefox (4 August 2009)
• Microsoft emergency fix kills bugs in IE, Visual Studio (28 July 2009)
• Firefox users caught in crossfire of warring add-ons (4 May 2009)
• Analysis Microsoft boasts 'out of box' IE8 clickjack protection (27 January 2009)
• Microsoft issues emergency IE patch as attacks escalate (17 December 2008)
• Updated In-the-wild attacks find hole in (fully-patched) IE 7 (9 December 2008)
• Firefox plug-in Trojan harvests logins (4 December 2008)
• Opera scrambles to quash zero-day bug in freshly-patched browser (27 October 2008)
• Mozilla security chief: Apple should open up (15 September 2008)