Avast WEBforum

Other => General Topics => Topic started by: YoKenny on August 30, 2009, 05:30:39 PM

Title: Firefox Add-on Spies on Google Search Results
Post by: YoKenny on August 30, 2009, 05:30:39 PM

Quote

Firefox Add-on Spies on Google Search Results
6:54 pm (UTC-7)   |   by Jonathan Leopando (Technical Communications)

Trend Micro threat analysts were alerted to the discovery of a spyware (detected as TSPY_EBOD.A) purporting to be an Adobe Flash Player update. Upon execution, the spyware creates a Firefox add-on called “Adobe Flash Player 0.2,” the installer of which uses JavaScript (detected as JS_EBOD.A) and appears to spread via forum posts. 

http://blog.trendmicro.com/firefox-addo-spies-on-google-search-results

Title: Re: Firefox Add-on Spies on Google Search Results
Post by: Alan Baxter on August 30, 2009, 06:55:37 PM

Thanks.  I'll continue to play it safe and get my Flash updates only from the Adobe site.

By the way, did you notice the problems with Trend Micro's "Figure 1. Firefox plugin".  Clearly it's a Firefox extension, not a plugin.  There's a big difference and I'm surprised Trend Micro didn't get that right.  Also, the figure is from a Firefox 2 installation.  Firefox 2 has been obsolete for over a year and has many unpatched vulnerabilities.