Firefox 4 crack spreads trojan

Posted by   Virus Bulletin on   Aug 6, 2010

'Cracked' versions of free software used to spread malware

In a new malware campaign, users are told they can download a free crack of the Firefox 4 browser, only to find themselves infected with trojans.

The lure of 'free' has made many a user browse the more dodgy parts of the internet, where crooks are eagerly waiting to infect their computers with malware. Cracked versions of commercial software more often than not contain malware and in many cases not even the real software itself. Apart from legal and moral considerations, users should be wary that cracked software is likely to contain unwanted extras.

What makes this case interesting is that Firefox 4, the new version of the popular browser which was released as a beta last month, is available for free from Mozilla's website; downloading a crack is thus totally pointless. It is thus not surprising that it is dangerous too and researchers at Sunbelt found at least five different pieces of malware in the download.

More at Sunbelt's blog here with not-so-subtle comments from The Register here.

Posted on 06 August 2010 by Virus Bulletin



Latest posts:

VB2016 paper: The TAO of Automated Iframe Injectors - Building Drive-by Platforms For Fun

We publish Aditya K. Sood's VB2016 paper on the use of iframe injectors by cybercriminals to deliver drive-by downloads.

“Cybersecurity is, at its core, a people problem,” says VB2016 keynote speaker

An interview with VB2016’s keynote speaker Christine Whalley - Director, Governance and IT Risk Management at Pfizer

Throwback Thursday: Following the Breadcrumbs

In 1999, Christine Orshesky described how one large organization decided to find out how and where the viruses within it were being obtained so it could do more to protect its networks.

VB2016 preview: Cryptography mistakes in malware

At VB2016, two talks will discuss mistakes made by malware authors in cryptographic implementations. Ben Herzog and Yaniv Balmas will present a paper in which they look at a number of these mistakes, while Malwarebytes researcher hasherezade will…

GPS technology is more at risk from cyber attack than ever before, security expert demonstrates at VB2016

Next month at VB2016, HPE Security's Oleg Petrovsky will speak about attacks on GPS. We conducted a short interview with Oleg and asked him about GPS, about the conference, and about his ultimate dinner party.