New banking threat disguised as Firefox add-on
A dangerous piece of malware can disguise itself as a legitimate Firefox app.

A new type of password-stealing Trojan which is disguised as a Firefox add-on has been discovered by security company BitDefender.
Trojan.PWS.ChromeInject.A downloads to the Mozilla Firefox folder when the browser is opened and filters data sent by the user to over 100 different online banking websites.
These include bankofamerica.com, chase.com, Halifax-online.co.uk, Wachovia.com, paypal.com and e-gold.com.
Once the user is infected, their login credentials are sent to a particular web address, with BitDefender stating that the domain and hosting server were located in Russia.
It has been reported that the malware disguises itself as Greasemonkey, a program which customises the way a webpage displays using JavaScript.
"Users should be aware of the risks they are facing if such confidential information is stolen," said Viorel Canja, head of BitDefender anti-virus lab.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
Should AI PCs be part of your next hardware refresh?
AI PCs are fast becoming a business staple and a surefire way to future-proof your business
By Bobby Hellard Published
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd Published
-
Mozilla patches high-severity security flaws in new ‘speedy’ Firefox release
News Numerous vulnerabilities across Mozilla's products could potentially lead to code execution and system takeover
By Connor Jones Published
-
CronRat Magecart malware uses 31st February date to remain undetected
News The malware allows for server-side payment skimming that bypasses browser security
By Rene Millman Published
-
Mekotio trojan continues to spread despite its operators’ arrests
News Hackers have used it in 100 more attacks since arrests
By Rene Millman Published
-
“Trojan Source” hides flaws in source code from humans
News Organizations urged to take action to combat the new threat that could result in SolarWinds-style attacks
By Rene Millman Published
-
What is Emotet?
In-depth A deep dive into one of the most infamous and prolific strains of malware
By Praharsha Anand Last updated
-
Fake AnyDesk Google ads deliver malware
News Malware pushed through Google search results
By Rene Millman Published
-
Hackers use open source Microsoft dev platform to deliver trojans
News Microsoft's Build Engine is being used to deploy Remcos password-stealing malware
By Rene Millman Published
-
Mozilla and Brave release one-click method for online privacy requests
News Mozilla, Brave and other online privacy leaders have released a streamlined way to protect your privacy
By Justin Cupler Published