firefox and 'call home' addons

max bianco maximilianbianco at gmail.com
Thu Dec 18 17:20:31 UTC 2008


On Thu, Dec 18, 2008 at 11:22 AM, max bianco <maximilianbianco at gmail.com> wrote:
> This is the most informative of the links I have found, apparently it
> was an email scam but this post is two years old, some of the others
> are from december of this year but they don't provide much detail. I
> wonder if its just a rehash of the old scam or if they are attacking
> the browser directly this time instead of via an email attachment.
>
> http://voices.washingtonpost.com/securityfix/2006/07/passwordstealing_trojan_disgui.html
>
Looks like it attacks only Windows so far, here is the BitDefender low down.

http://www.bitdefender.com/VIRUS-1000451-en--Trojan.PWS.ChromeInject.B.html

This article from PCWorld India offers a few more details. Drive by
downloads and tricking users seem to be the primary method of
infection.

http://www.pcworld.in/india/news/5800093/Spyware__Security/Firefox_Users_Hit_by_PasswordStealing_Trojan

the russians are coming!!!(no offense to russians, just a little
coldwar humor) or they might already be in your box .

So be careful in online shopping, it looks to primarily target
winblows but if you dual boot, especially if you have the ability to
read/write ext3 from windows, its possible there could be some danger
of it downloading a buddy for your linux install but they don't say
one way or the other as far as I can see.  Turning off javascript is
recommended, at least when you visit a financial website. I've gone
through over a dozen "articles" now but none offers much more than the
links above.

Oh its that wonderful time of year
when folks are giddy and full of christmas cheer
and of course scumbags are trying to deprive you of beer money...
I mean money for gifts......no, I mean beer money
Bah humbug!! ;^)


-- 
"Any fool can know. The point is to understand."

-Albert Einstein




More information about the fedora-list mailing list