
Most security researchers recommend that users do not tell Firefox to remember passwords stored them for being so easily extracted by malware.
Trojan malware virus called PWS-Nslog discovered by security firm Webroot. By Webroot, users are asked to actually disable the Firefox code and password when users log into a secure site.
"Before the infection, the default installation of Firefox 3.6.10 will encourage the user after the user clicks the Log In button on a Web page, asking if he wanted to save the password," said Andrew Brandt Webroot researchers, quoted by PC World,
In particular, the Trojan adds a few lines of code and "comment out" other parts of the code of Firefox file named nsLoginManagerPrompter.js. Tersebutlah code that uses a password code which is stored by the browser Firefox. With that information, the Trojan creates a new account with the name "Maestro" on the infected computer.
"From there, the Trojan will steal some important information that can harm computer users," he said.
0 comments:
Post a Comment
please leave a comment