• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

New trojan disguises itself as a firefox extension.

zekrahminator

McLovin
Joined
Jan 29, 2006
Messages
9,066 (1.31/day)
Location
My house.
Processor AMD Athlon 64 X2 4800+ Brisbane @ 2.8GHz (224x12.5, 1.425V)
Motherboard Gigabyte sumthin-or-another, it's got an nForce 430
Cooling Dual 120mm case fans front/rear, Arctic Cooling Freezer 64 Pro, Zalman VF-900 on GPU
Memory 2GB G.Skill DDR2 800
Video Card(s) Sapphire X850XT @ 580/600
Storage WD 160 GB SATA hard drive.
Display(s) Hanns G 19" widescreen, 5ms response time, 1440x900
Case Thermaltake Soprano (black with side window).
Audio Device(s) Soundblaster Live! 24 bit (paired with X-530 speakers).
Power Supply ThermalTake 430W TR2
Software XP Home SP2, can't wait for Vista SP1.
McAfee has recently discovered a new virus with an interesting characteristic- it installs itself as a Firefox extension. Calling itself the legitimate extension numberedlinks, it acts as a keylogger once installed. It bypasses the standard Firefox security of an installation prompt by not using the .XPI expansion pack filetype. Geok Meng Ong from McAfee labs "called on users to take extreme caution when installing unsigned Firefox extensions from untrustworthy sources", though most Firefox extensions are not signed, and very few websites are allowed to distribute them.

View at TechPowerUp Main Site
 
Joined
Jul 1, 2005
Messages
5,197 (0.73/day)
Location
Kansas City, KS
System Name Dell XPS 15 9560
Processor I7-7700HQ
Memory 32GB DDR4
Video Card(s) GTX 1050/1080 Ti
Storage 1TB SSD
Display(s) 2x Dell P2715Q/4k Internal
Case Razer Core
Audio Device(s) Creative E5/Objective 2 Amp/Senn HD650
Mouse Logitech Proteus Core
Keyboard Logitech G910
zekrahminator said:
McAfee has recently discovered a new virus with an interesting characteristic- it installs itself as a Firefox extension. Calling itself the legitimate extension numberedlinks, it acts as a keylogger once installed. It bypasses the standard Firefox security of an installation prompt by not using the .XPI expansion pack filetype. Geok Meng Ong from McAfee labs "called on users to take extreme caution when installing unsigned Firefox extensions from untrustworthy sources", though most Firefox extensions are not signed, and very few websites are allowed to distribute them.

Source: Heise-security

As usual, most security holes are the users themselves...
 

zekrahminator

McLovin
Joined
Jan 29, 2006
Messages
9,066 (1.31/day)
Location
My house.
Processor AMD Athlon 64 X2 4800+ Brisbane @ 2.8GHz (224x12.5, 1.425V)
Motherboard Gigabyte sumthin-or-another, it's got an nForce 430
Cooling Dual 120mm case fans front/rear, Arctic Cooling Freezer 64 Pro, Zalman VF-900 on GPU
Memory 2GB G.Skill DDR2 800
Video Card(s) Sapphire X850XT @ 580/600
Storage WD 160 GB SATA hard drive.
Display(s) Hanns G 19" widescreen, 5ms response time, 1440x900
Case Thermaltake Soprano (black with side window).
Audio Device(s) Soundblaster Live! 24 bit (paired with X-530 speakers).
Power Supply ThermalTake 430W TR2
Software XP Home SP2, can't wait for Vista SP1.
True, I was trying to find a way to put "As usual, make sure not to open unknown emails, and especially remember not to download attachments from unknown senders", but I think we're smarter then that lol.
 
Joined
May 9, 2006
Messages
2,116 (0.31/day)
System Name Not named
Processor Intel 8700k @ 5Ghz
Motherboard Asus ROG STRIX Z370-E Gaming
Cooling DeepCool Assassin II
Memory 16GB DDR4 Corsair LPX 3000mhz CL15
Video Card(s) Zotac 1080 Ti AMP EXTREME
Storage Samsung 960 PRO 512GB
Display(s) 24" Dell IPS 1920x1200
Case Fractal Design R5
Power Supply Corsair AX760 Watt Fully Modular
We might be smarter than that but its sisters that tend to get viruses on the computer through limewire somehow :p.
 
Top