Comments on: Firefox Extension Steals Private Data http://cybernetnews.com/firefox-extension-steals-private-data/ Technology News Sun, 22 Nov 2009 03:57:44 -0600 http://wordpress.org/?v=2.8.6 hourly 1 By: Nathaniel http://cybernetnews.com/firefox-extension-steals-private-data/comment-page-1/#comment-7637 Nathaniel Thu, 27 Jul 2006 19:35:28 +0000 http://tech.cybernetnews.com/2006/07/27/firefox-extension-steals-private-data/#comment-7637 Just for a little more clarification for you about this. "The FormSpy trojan does not use any Firefox security flaws to infect computers. Instead, it is downloaded and installed automatically by a piece of Windows malware known as Downloader-AXM, which exists solely for the purpose of surreptitiously downloading and running trojan horses. Once downloaded by Downloader-AXM, FormSpy installs itself in Firefox by directly modifying Firefox user profile files, completely bypassing the standard Firefox extension installation mechanism (and warning messages)." from http://mozillazine.org/talkback.html?article=12722 Just for a little more clarification for you about this.

“The FormSpy trojan does not use any Firefox security flaws to infect computers. Instead, it is downloaded and installed automatically by a piece of Windows malware known as Downloader-AXM, which exists solely for the purpose of surreptitiously downloading and running trojan horses. Once downloaded by Downloader-AXM, FormSpy installs itself in Firefox by directly modifying Firefox user profile files, completely bypassing the standard Firefox extension installation mechanism (and warning messages).”

from [mozillazine.org]

]]> By: Nathaniel http://cybernetnews.com/firefox-extension-steals-private-data/comment-page-1/#comment-7636 Nathaniel Thu, 27 Jul 2006 19:21:01 +0000 http://tech.cybernetnews.com/2006/07/27/firefox-extension-steals-private-data/#comment-7636 To install it, you have to run IE first....it uses an IE exploit to directly write the files into the Firefox profile. So it's not a Firefox security flaw at all. To install it, you have to run IE first….it uses an IE exploit to directly write the files into the Firefox profile. So it’s not a Firefox security flaw at all.

]]>