Open=Source takes one in the eye as Trojan.PWS.ChromeInject.B  secretly works as a Firefox plugin and steals bank login details on any of 103 domains belonging to mainly non-US banks. BitDefender identifies ChromeInject as “…the first malware that targets Firefox.”

Fortunately the infection rate thusfar is low; but there’s always a chance of this type of thing escalating. The false plugin works by running a JavaScript and a Windows executable file: Seemingly this trojan only affects Firefox running in Windows; Linux and Mac are most likely safe, at least from this version of this trojan. How long this will be the case is anyone’s guess.

Is this the start of a long-running malware campaign against Firefox. Will a plethora of variations of this trojan be targeted at Firefox by the malware writers? Judging by previous form I would expect that to be the case. What would you suggest? Do you agree with me, or do you think that this is just a one-off?