Firefox gói tiếng Việt có Trojan
Ngô Quang Hưng | 08 tháng 05, 2008 | 
Bản để in
“Wired.com is reporting that the Firefox browser has been unknowingly distributing a trojan with the Firefox Vietnamese language pack. Over 16,000 downloads of the pack occurred since being infected. This highlights a risk on relying on user-submitted Firefox extensions, or a lack of peer-review of the extensions, many of which receive frequent upgrades.”
Dường như là chỉ những ai download cái add-on này kể từ ngày 18 tháng 2 vừa rồi thì mới bị:
Mozilla had no exact statistics on the number of users who had installed the infected Vietnamese language add-on since it was uploaded on February 18, but said that 16,667 people had downloaded the add-on since November 2007.
Hậu quả là thế nào?
The add-on’s author is not suspected of intentionally booby-trapping the file, but instead had his own system infected. That Trojan inserted a banner-ad displaying script into any html file on his system, which included the help files for the language pack.
That meant that anyone installing the language pack would have malicious ad displaying code inside their browser — which could be used for other exploits.
The Vietnamese language pack has been pulled until a clean replacement is uploaded. Existing users should uninstall the add-on in the meantime.