検索:
ホーム   »     »   Malicious Firefox Extensions

Malicious Firefox Extensions

  • 投稿日:2006年3月2日
  • 脅威カテゴリ:未分類
  • 執筆:ウイルス解析担当者
0

This is a long time coming – Firefox extensions that have malicious intent. Because Firefox extensions are executable code, the coder can do anything he wants, as long as he can code it.


A person posted an advisory in Bugtraqdetailing a Firefox extension he created which is capable of sniffing passwords in HTML forms. The Firefox extension, which he dubbed has the name FFsniFF (FireFox sniFFer).


It should be noted that this is neither a bug nor a vulnerability in Firefox. Firefox extensions are executable code; the creator can do anything he/she desires.


If a user is indeed infected by a malicious Firefox extension, the infection is only limited to that user; it is not system-wide. For Windows XP/2000 users, each user’s set Firefox extensions is independent from one another. The extensions are stored in each respective user’s profile. The same goes for Linux users. Users using the same system does not share the same set of extensions.


However, this could become problematic for users in Internet cafes, where it is customary that only one user account is used throughout.


Malicious Firefox extension can be avoided, easily – do not install extensions from untrusted sources. Only install extensions coming from the official Firefox extension repository.



  • https://addons.mozilla.org/?application=firefox

Firefox itself warns users before installing any extensions.


Malicious software can damage your computer or violate your privacy.
You should only install software from sources that you trust.


It’s time to consider those warnings, seriously.


No related posts.



  • 個人のお客さま向けオンラインショップ
  • |
  • 法人のお客さま向け直営ストア
  • |
  • 販売パートナー検索
  • Asia Pacific Region (APAC): Australia / New Zealand, 中国, 日本, 대한민국, 台灣
  • Latin America Region (LAR): Brasil, México
  • North America Region (NABU): United States, Canada
  • Europe, Middle East, & Africa Region (EMEA): France, Deutschland / Österreich / Schweiz, Italia, Россия, España, United Kingdom / Ireland
  • 電子公告
  • ご利用条件
  • プライバシーポリシー
  • Copyright © 2021 Trend Micro Incorporated. All rights reserved.