ITPRO

Printed from www.itpro.co.uk

Register to receive our regular email newsletter at http://www.itpro.co.uk/reg/register.

The newsletter contains links to our latest IT news, product reviews, features and how-to guides, plus special offers and competitions.

Skip to navigation

    New banking threat disguised as Firefox add-on

A dangerous piece of malware can disguise itself as a legitimate Firefox app.

By Asavin Wattanajantra, 5 Dec 2008 at 15:41

A new type of password-stealing Trojan which is disguised as a Firefox add-on has been discovered by security company BitDefender.

Trojan.PWS.ChromeInject.A downloads to the Mozilla Firefox folder when the browser is opened and filters data sent by the user to over 100 different online banking websites.

These include bankofamerica.com, chase.com, Halifax-online.co.uk, Wachovia.com, paypal.com and e-gold.com.

Once the user is infected, their login credentials are sent to a particular web address, with BitDefender stating that the domain and hosting server were located in Russia.

It has been reported that the malware disguises itself as Greasemonkey, a program which customises the way a webpage displays using JavaScript.

“Users should be aware of the risks they are facing if such confidential information is stolen,” said Viorel Canja, head of BitDefender anti-virus lab.

Email to a friend

Print this page

< Previous   Security : News Next >

Be the first to comment on this article

You need to Login or Register to comment.

    You may also like...

 Sponsored Links

advertisement

    You may also like...

advertisement

    Register for IT PRO

You'll get exclusive member benefits including free whitepapers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.

Sponsored Links
Advertisement