Security researchers have warned about the existence of new spyware that creates a Firefox add-on, which can monitor users' search activities.
The spyware initially pretends to be an Adobe Flash Player update and, when executed on a user's computer, creates a Firefox add-on called Adobe Flash Player 0.2'. It was said to appear through forum posts.
Trend Micro's Jonathan Leopando said in a blog post that it had a disturbing "capability to monitor the user's browsing activities, particularly his/her Google search queries using the Firefox browser. It then sends the information it gathers to http://{BLOCKED}jupdate.com."
The add-on could also inject advertisements into a Google search results page.
Leopando said malware had historically generally targeted Internet Explorer, which is why many users opt forother browsers like Firefox, Chrome and Safari.
He said: "Though this used to be considered a safe computing practice before, it seems it no longer is with the proliferation of malware targeting the most popular alternative internet browser- Firefox."
-
Spanish spyware outfit uncovered, develops exploits for Windows, Chrome, and FirefoxNews Google was only able to discover the company after an anonymous submission was made to its Chrome bug reporting programme
-
Firefox 95 boosts protection against zero-day attacksNews Mozilla's browser now takes a more granular approach to walling off code
-
Mozilla to end support for Firefox Lockwise password manager
News Replacement service already lined up as browser specialist continues to streamline business
-
Apple sues NSO Group over Pegasus attacks on its customersNews The lawsuit claims 'flagrant' violations of US federal and state law from the Israeli firm behind the infamous spyware
-
Firefox available on Microsoft Store for first timeNews Gecko-based browser arrives after Microsoft removes restrictions
-
Why I’m leading a browser double lifeOpinion There are benefits to using more than one browser
-
Mozilla fixes two Firefox zero-days being actively exploitedNews Critical vulnerabilities allow attackers to execute arbitrary code or trigger crashes
-
Firefox activates DNS over HTTPS for US users by defaultNews The privacy push, which encrypts all web traffic, has angered ISPs and regulators
