Mozilla also was unavailable late Thursday to respond to questions, including why the infected Sothink Web Video Downloader add-on was not detected in 2008, and whether it planned to reach out to users who had downloaded the tainted extensions.Īlthough Mozilla has removed both add-ons from its download site, post-4.0 editions of Sothink Web Video Downloader remain available on other download sites. The company did not reply to a request for comment or an explanation of how its add-on was infected. SourceTec Software, which makes Sothink Web Video Downloader, is based in China, according to the phone number listed on its Web site. Little could be found on the Web about the author of Master Filer, identified as "haklinim," other than that he or she used an anonymous proxy server in Japan to shunt traffic to a developer biography, which Mozilla has also deleted. Mozilla urged users who downloaded the add-ons to uninstall them and, because that doesn't scrub the Trojan from the system, to also run an antivirus scan to detect and delete the malware.
#Mozilla firefox add ons anonymous code#
"This scanning tool failed to detect the Trojan in Master Filer." After adding more scanning tools to the process, a rescan of all add-ons uncovered the attack code embedded in Sothink Web Video Downloader 4.0, which was yanked from the download site Tuesday. " performs a malware check on all add-ons uploaded to the site, and blocks add-ons that are detected as such," said yesterday's blog. Mozilla acknowledged that its security process failed. Mac and Linux users who installed the add-ons were not affected. The most up-to-date version of the latter, which captures streaming videos in a variety of formats, is 5.7.Īny Windows users who installed one of the two add-ons would have also silently executed the Trojan, which would then infect the PC.
Sothink Web Video Downloader 4.0 was downloaded approximately 4,000 times between February and May 2008. Master Filer was downloaded about 600 times in the five months ending Jan.
0 kommentar(er)
