Fake Firefox add-on snares users in botnet

By
Follow google news

Infects more than 12,500 PCs.

Malware disguising itself as a Firefox add-on has ensnared more than 12,500 PCs in a botnet that, since May, has uncovered more than 1,800 vulnerable websites, technology journalist Brian Krebs wrote on Monday. He added that a component to steal sensitive information exists, but does not appear to be active.

Fake Firefox add-on snares users in botnet

Although it is unclear how the botnet – known as Advanced Power – initially spread, what is known is that infected Firefox users are unknowingly hitting almost every website they visit with SQL injection attacks. Text strings in the malware suggest the author may be from Czech Republic, Alex Holden, CISO at Hold Security, was quoted as saying.

SQL injection typically involves an attacker inputting SQL statements into an entry field that will force the system to execute potentially malicious commands.

This article originally appeared at scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

National photo licence recognition system set to go live in 2025

National photo licence recognition system set to go live in 2025

Hackers using F5 devices to target US gov networks

Hackers using F5 devices to target US gov networks

Qantas says customer data released by cyber criminals

Qantas says customer data released by cyber criminals

Austrade to replace its data centre core network

Austrade to replace its data centre core network

Log In

  |  Forgot your password?