Home Messages Index
[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index

Re: Firefox plug-in Trojan harvests logins

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

____/ nessuno@xxxxxxxxxxxxxxxxxxx on Monday 15 December 2008 22:54 : \____

> 
> 
> <Quote>
> Virus writers have latched onto the popularity of Firefox with a new
> variant on the established practice of stealing online banking
> passwords.
> 
> A password pinching Trojan that poses as a Firefox Plugin is doing the
> rounds... ChromeInject-A is typically downloaded onto Windows PCs
> already compromised by other strains of malware.
> 
> Once installed, the Trojan sits in Firefox's Plugin folder, activating
> every time the popular browser is started. The backdoor code looks for
> data exchanged between a compromised machine and a list of pre-
> programmed banking sites in Europe, Australia and the US.
> </Quote>
> 
> I posted this several days ago, but forgot the link:
> 
> http://www.theregister.co.uk/2008/12/04/firefox_plug_in_trojan/
> 
> Only works on Windows machines already compromised by worms or
> viruses. 

Ahh... that would be 4 out of 10 Windows boxes.

Conclusion: don't use Windows. Don't use IE, either.

MS issues brown alert over unpatched IE 7 flaw

,----[ Quote ]
| Microsoft warned on Saturday that attacks targeting the vulnerability, which
| affects versions of its flagship browser on all supported versions of
| Windows, are becoming more widespread. The security bug first came to
| prominence a week ago, just before the latest edition of Microsoft's update
| cycle.
`----

http://www.theregister.co.uk/2008/12/15/ie7_exploits/

- -- 
                ~~ Best of wishes

Beware the Windows box spewage (more commonly known as "spam")
http://Schestowitz.com  |  Open Prospects   |     PGP-Key: 0x74572E8E
Tasks: 140 total,   1 running, 139 sleeping,   0 stopped,   0 zombie
      http://iuron.com - knowledge engine, not a search engine
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklHBzUACgkQU4xAY3RXLo4ngwCeKbm1Ejj5Nd1TZDOHUsZStO9t
hv4An3FeOeGdFGhdSejfCREsKtjrBCMQ
=K7VZ
-----END PGP SIGNATURE-----

[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index