Online Banking Passwords Stolen by Fake Firefox Plug-in

According to "The Paypers" a fake Firefox plug-in targets data exchanges between online banking and money transfer sites here, and abroad in Australia and Europe.  

Romanian anti-virus company BitDefender warns online banking users that a Trojan virus posing as a plugin for the popular web browser Mozilla Firefox is currently targeting computers which are already infected with other strains of malware.

ChromeInject-A, the Trojan in question, sits in the Firefox plugin folder and is activated every time users start Firefox. It targets data exchanges between infected computers and a series of pre-defined online banking and money transfer sites in Europe, the US and Australia. Once the sensitive login information is acquired, it is forwarded to a rogue server in Russia. BitDefender reports that while incidents involving the Trojan posing as Firefox plugin have so far been rare, the virus can cause “very high” levels of damage once it infected a vulnerable computer.

Related articles by Zemanta

• Firefox plug-in Trojan harvests logins
• Firefox Threat: "Rare" Malware Targeting Browsers
• Malware Hides As A Firefox Plugin
• Firefox users targeted by rare piece of malware