Fake Firefox add-on snares users in botnet

By on
Fake Firefox add-on snares users in botnet

Infects more than 12,500 PCs.

Malware disguising itself as a Firefox add-on has ensnared more than 12,500 PCs in a botnet that, since May, has uncovered more than 1,800 vulnerable websites, technology journalist Brian Krebs wrote on Monday. He added that a component to steal sensitive information exists, but does not appear to be active.

Although it is unclear how the botnet – known as Advanced Power – initially spread, what is known is that infected Firefox users are unknowingly hitting almost every website they visit with SQL injection attacks. Text strings in the malware suggest the author may be from Czech Republic, Alex Holden, CISO at Hold Security, was quoted as saying.

SQL injection typically involves an attacker inputting SQL statements into an entry field that will force the system to execute potentially malicious commands.

This article originally appeared at scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition

Most Read Articles

You must be a registered member of iTnews to post a comment.
| Register

Log In

Username / Email:
  |  Forgot your password?