Trojan that targets Firefox

  • Thread starter Thread starter Duh_OZ
  • Start date Start date
Duh_OZ said:
http://www.bitdefender.com/VIRUS-1000451-en--Trojan.PWS.ChromeInject.B.html
=======
It drops an executable file (which is a Firefox 3 plugin) and a
JavaScript file (detected by Bitdefender as:
Trojan.PWS.ChromeInject.A) into the Firefox plugins and chrome folders
respectively.

Seems to affect only Firefox for Windows.

<quote>
SYMPTOMS:
Presence of the:
"%ProgramFiles%\Mozilla Firefox\plugins\npbasic.dll"
"%ProgramFiles%\Mozilla Firefox\chrome\chrome\content\browser.js"
files in the Mozilla Firefox's plugins and chrome folders.
It filters the URLs within the Mozilla Firefox browser and whenever
encounter the following addresses opened in the Firefox browser it
captures the login credentials.

They should have sorted the bank list alphabetically... ;-)
 
Back
Top