These are a couple of links I found on this regard:

http://www.betanews.com/article/Trojan_Hides_Itself_as_Firefox_Extension/1153934797

http://news.com.com/Trojan+piggybacks+on+Firefox/2100-7349_3-6098615.html

Regards,

Jesus Zepeda

-----Original Message-----
From: tg [mailto:thomas.gozolits@gmx.de]
Sent: Friday, July 28, 2006 16:12
To: plug-discuss@lists.plug.phoenix.az.us
Subject: Firefox vulnerability -- trojan horse

Hi folks,

I recently got the information of a german site that there is a trojan horse vulnerability for firefox.

The attack pretends being a WalMart invoice. The trojan horse will be installed as a firefox

extension (maybe plugin??) and starts to sniff / record all browser input like user id and password

from shopping and online banking.

thanks,

tom aka gonzo