Spyware ad-on targets Firefox fans
Fake Flash bash
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
Miscreants have created an item of spyware targeted at Firefox users.
The malware poses as an Adobe Flash Player update but in reality its designed to log a user's browsing history, in particular their Google search queries within Firefox. This information is uploaded to a hacker-controlled server.
EBOD-A also has the capability to inject ads into the user’s Google search results pages, Trend Micro warns, which adds that the malware appears to be spreading via forum posts.
The spyware creates a Firefox add-on called "Adobe Flash Player 0.2", which has nothing to do with either Adobe or Mozilla. More on the threat can be found in a write-up by Trend, which includes screenshots, here.
Malware targeting Firefox users is rare but not unprecedented. Strains of malware that latch onto Internet Explorer, Microsoft's Swiss-cheese browser, are much more commonplace. Common IE-related malware trickery involves exploiting unpatched security vulns to download malware onto vulnerable machines via drive-by download attacks. ®
COMMENTS
There's More To Hack Than This
Oh, we talk about the Security of Mozilla (-: User is the best hacker, especially when downloads the add-ons from, right, anywhere else.
The thing that really shocks is not Firefox though, talk about some ...sky antivirus FTP connection negotiations are not encrypted and you can always see "k...vdumps" pass in pcap files served on the plate. Though, it's not an official c...mplaint.
Oh, sorry, we're talking about Mozilla. Best idea of a browser ever, I suppose.
73
Derrrr
It already tried to get me.
One day a pop-up appeared, 'Update Flash'. Sure OK.........
Who in there right-mind installs a random pop up,
regardless of who it claims to originate!
Advert free ego massaging would go down a ton with most people
unfortunately its the gullible that fall for this kind of stuff and they end up screwing economies and people lives.
Mallware that takes the gullible and stupid off line is all part of the computing evolution. To 'rescue' people from it is as stupid as rescuing broke banks, or making all cars do 2 miles an hour to avoid a few prats having accidents.
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
