Feeds

Mozilla admits Firefox add-on malware false alarm

One item of AMO badness just a blank

Boost IT visibility and business value

Updated Mozilla has admitted it erred in labelling one of the two Firefox add-ons offered for download from its official add-on site as malign last week.

Warnings that version 4.0 of Sothink Video Downloader add-on was contaminated by a Trojan were wrong and down to a false positive triggered by an anti-virus scanner used by Mozilla rather than the presence of real malware. The add-on, withdrawn from download last week because of malware concerns, has now been restored.

In a blog posting on Tuesday, Mozilla apologised for the mix-up and confirmed the other add-on under suspicion, Master Filer, is infected by the Bifrose Trojan and remains blacklisted.

The open source browser firm thanked McAfee for helping it sort out the confusion. It's not clear whose scanner triggered the false alert in the first place.

Mozilla revised its estimates that 6,000 downloads of potentially infected downloads might have taken place radically downwards. It now reckons its site might have served up malware-laced Firefox plug-ins fewer than 700 times.

As previously reported, Master Filer was downloaded 600 times between September 2009 and January from Mozilla's official add-on site before potential problems were detected. A scanning tool used to check add-ons during the upload process failed to detect anything awry even though the password-stealing Trojan strain it was infected with has been detected by commercial scanners since October 2008.

Malware infection in Firefox add-ons is rare but not unprecedented. In May 2008, the open source browser supplier warned that a Vietnamese language pack for Firefox 2 was contaminated with adware. ®

Boost IT visibility and business value

More from The Register

next story
USA to insist on pre-flight mobe power probe
Prove it works or it can't come aboard flights to USA
Brit celebs' homes VANISH from Google's Street View
Tony Blair's digs now a Tone-y Blur
Computing student jailed after failing to hand over crypto keys
Sledgehammer once again used to crack a nut
Doctor Who season eight scripts leak online
BBC asks fans to EXTERMINATE copies before they materialise
Snowden leaks latest: NSA, FBI g-men spied on Muslim-American chiefs
US Navy veteran? Lawmaker? Academic? You're all POTENTIAL TERRORISTS
Russian MP fears US Secret Service cuffed his son for Snowden swap
Seleznev Jnr is 'prolific trafficker in stolen credit card data', it is alleged
Insecure AVG search tool shoved down users' throats, says US CERT
Sneaky 'foistware' downloads install things you never asked for
That 'wiped' Android phone you bought is stuffed with NAKED SELFIES – possibly
Infosec bods sound alarm after copping eyefuls of nudie pics
prev story

Whitepapers

How modern custom applications can spur business growth.
In this whitepaper learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
The Power of One eBook: Top reasons to choose HP BladeSystem
Only the Power of One delivers leading infrastructure convergence, availability and scalability with federation, and agility through data center automation.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Maximizing your infrastructure through virtualization
Virtualization continues to be one of the most effective ways to consolidate, reduce cost, and make data centers more efficient.
Build a Business Case: Developing Custom Apps
In this whitepaper learn how to maximize the value of custom applications by accelerating and simplifying their development.