These are a couple of links I found on this regard:
 
http://www.betanews.com/article/Trojan_Hides_Itself_as_Firefox_Extension
/1153934797
 
http://news.com.com/Trojan+piggybacks+on+Firefox/2100-7349_3-6098615.htm
l
 
Regards,
 
Jesus Zepeda
 
-----Original Message-----
From: tg [mailto:thomas.gozolits@gmx.de] 
Sent: Friday, July 28, 2006 16:12
To: plug-discuss@lists.plug.phoenix.az.us
Subject: Firefox vulnerability -- trojan horse
 
Hi folks,
 
I recently got the information of a german site that there is a trojan
horse vulnerability for firefox.
The attack pretends being a WalMart invoice. The trojan horse will be
installed as a firefox
extension (maybe plugin??) and starts to sniff / record all browser
input like user id and password
from shopping and online banking.
 
thanks,
tom aka gonzo