Trojan Cloaks Itself as Firefox Extension Jeremy Kirk, IDG News Service Wed Jul 26, 9:00 AM ET
http://news.yahoo.com/s/pcworld/20060726/tc_pcworld/126556;_ylt=AhXOhpG6q0ss hdT.wnQQXRKs0NUE;_ylu=X3oDMTA3cjE0b2MwBHNlYwM3Mzg- Security vendor McAfee has detected a new piece of malicious software that masquerades as part of the Firefox Internet browser. McAfee calls the Trojan horse "FormSpy." Trojan horses are programs, often attached to spam e-mail, that appear innocuous but are harmful to a computer. FormSpy is downloaded to a computer that is already infected with another Trojan horse called "Downloader-AXM," McAfee said. That Trojan was recently detected in e-mail spam messages. Downloader-AXM contacts servers to download other malicious programs to a computer without a user's knowledge, according to McAfee. Stealing Information Once downloaded, FormSpy installs itself as a Firefox extension. The program appears as "NumberedLinks 0.9" extension, McAfee said. The extension normally would allow a user to navigate links by numbers using the keyboard rather than a mouse. Then, FormSpy can transmit information in a Web browser to another Web site, which could include credit card numbers, passwords, and electronic banking pin numbers, according to McAfee. FormSpy can also steal e-mail, ICQ instant messaging service, and FTP (file transfer protocol) passwords, it said. Gregory S. Williams [EMAIL PROTECTED] Reply with a "Thank you" if you liked this post. _____________________________ MEDIANEWS mailing list [email protected] To unsubscribe send an email to: [EMAIL PROTECTED]
