[EMAIL PROTECTED]: > Hi All! > > Unfortunately I have to inform you about new trojan developed for > Firefox. It can be found at > http://rapidshare.com/files/127049095/InstallationFF3Ultimate.exe.html > (WARNING! Contains malicious code!!!) The trojan is published in > Internet as "New Ultimate upgrade to Firefox 3 adding new features". > After starting this trojan collects all passwords infromation stored > in FF and it's add-ons and then sends it bia e-mail to > [EMAIL PROTECTED] and possibly via ftp as well. > > I have sent this trojan to AVG, Avast, Kaspersky, DrWEB, Avira, NOD, > BitDefender, F-Secure, McAfee Virus Labs, at the present moment DrWeb > lab added it in virus bases. > > Be carefull with unknown content in Internet! Hope Development Team > will change something in FF 3 to resist to such trojans and to improve > security.
A blacklist of known add-ons would be helpful. Or perhaps require code signing of the add-ons... -- Regards Signer: Eddy Nigg, StartCom Ltd. Jabber: [EMAIL PROTECTED] Blog: https://blog.startcom.org _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security