Firefox Targeted by Banking Site Password Stealer

Hat Tip: Stealthed Zone

It does not happen often that Firefox is specifically targeted without the other major browsers also being included. In this case, it is a particularly malicious software as it collects passwords for banking sites.

As reported at InfoWorld:

"Users could be infected with the Trojan either from a drive-by download, which can infect a PC by exploiting a vulnerability in a browser, or by being duped into downloading it, Canja said.

When it runs on a PC, it registers itself in Firefox's system files as "Greasemonkey," a well-known collection of scripts that add extra functionality to Web pages rendered by Firefox."

Recommendations:

• Use Internet Explorer for all online banking and similar sensitive activities
  
  
• ONLY download add-ons (extensions) from the official Mozilla download site: https://addons.mozilla.org/en-US/firefox/
  

• Use NoScript

Edit: The obvious occurred to me after publishing this information. Because this malicious script can be a drive-by download (downloaded without any interaction by the user), until the vulnerability has been addressed, use Internet Explorer for all online credit card purchases and banking activities.

References:

• BitDefender detects novel approach to stealing web passwords
• Firefox users targeted by rare piece of malware

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...