• On MP3.com: Free music videos

July 26, 2006 8:33 AM PDT

Trojan piggybacks on Firefox

A new Trojan horse making the rounds has been installing itself as a Firefox extension, according to security company McAfee.

The FormSpy Trojan attacks computers that have already been infected with the Downloader-AXM Trojan, according to a security advisory McAfee issued Tuesday. Once FormSpy is executed, it installs itself as a component of the Firefox Web browser.

The FormSpy spyware then gleans sensitive information, such as credit card and bank account numbers, from the user's browser and forwards it to a malicious Web site. But this Trojan is capable of other tricks, as well, McAfee noted.

The main executable is also capable of sniffing passwords from traffic for ICQ (the "I seek you" program that alerts users to the presence of acquaintances online), FTP (file transfer protocol), IMAP (Internet message access protocol, an e-mail management program) and POP3 (post office protocol, a data format for e-mail), McAfee warned.

Although the FormSpy Trojan is circulating, it is considered a low risk, McAfee said. What's more, people may have already taken steps to mitigate the earlier Downloader-AXM Trojan that is needed for the FormSpy Trojan to take hold.

See more CNET content tagged:
Networks Associates Technology Inc., McAfee Inc., trojan horse, Firefox, FTP

Add a Comment (Log in or register) 18 comments
Get a Mac
by jaystring July 26, 2006 9:44 AM PDT
Nice it does not concern me. I have an apple at home.
Reply to this comment View all 3 replies
Get Paper & Pen.
by kamwmail-cnet1 July 26, 2006 11:04 AM PDT
It's about as useful as a Mac. And it's even more resistent to virii and trojans.
Reply to this comment View reply
A non-Microsoft security threat, now _that's_ news.
by extinctone July 26, 2006 1:05 PM PDT
See subject, eom
Reply to this comment
Misleading headline
by omaryak July 26, 2006 2:27 PM PDT
From the headline I would think I'd be in danger from using Firefox, but the Trojan didn't piggyback on the browser; it piggybacked on an extension, which a user has to download separately and deliberately. The more accurate headline would be "Trojan piggybacks on Firefox extension." To be even more accurate, it's not just the extension but the Windows flaw that allows the other trojan to exist that allows the trojan to piggyback on the extension, but I can see how that would be hard to fit in one headline. Can we get at least 50% accuracy out of your headlines, CNET, or are you deliberately engaging in yellow journalism?
Reply to this comment View reply
Can somebody brave enough try this? Please?
by benjiernmd July 27, 2006 1:10 PM PDT
Let us see if the Trojan can thrive in a Mac running the Firefox.
Reply to this comment
Only Common Sense
by wbenton July 30, 2006 5:56 AM PDT
Just another common sense reason why not to keep such information stored in forms within a browser or any other form on your PC.

Walt
Reply to this comment
What the Hell is up with...
by Dewdrop July 27, 2007 2:41 PM PDT
Firefox being useless do to on-going viruses.. I never thought that Firefox would end up this way...Between the dam Generic5...and spooldr...etc...it us useless to me...Back to Internet Explorer.....No problems, with the parasites so far........
Reply to this comment View all 2 replies
Powered by Jive Software
advertisement

Latest tech news headlines

Resource center from News.com sponsors
You Need The Speed of Norton 2009
Introducing Norton Internet Security™2009

Click Here!
With one-click, one-minute install, under 8MB of memory usage and fewer, shorter scans, it's the fastest security suite anywhere. Norton. Smart Security, Engineered for Speed. Get a FREE trial today!

Click Here!
The Fastest Security Suite Anywhere

Experience the revolutionary Norton Internet Security™ 2009. With Norton™ Insight, a new feature, you get precision security that targets only at risk files for fewer, faster, shorter scans

Win a Trip to Space!*

Enter the Blast Off with Norton Sweepstakes for your shot at a trip to space. You could experience being fast and weightless, just like the new Norton 2009. *No purchase necessary; click for full details.

FREE Trial!

Act now to get your FREE trial of Norton Internet Security 2009. Try it for the protection. Love it for the speed

Norton Safe Web NEW!

A community-based system that rates web site safety

Norton Labs NEW!

Users can download new security technologies and share input directly with developers. Help us shape our future products!

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

More feeds available in our RSS feed index.

advertisement

Inside CNET News

Scroll Left Scroll Right