503661 - Password stealer and program name is "Firefox Stealer"

Status: RESOLVED INVALID

(Toolkit :: Safe Browsing, defect)

Description

[OnuR]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.1) Gecko/20090624 Firefox/3.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.1) Gecko/20090624 Firefox/3.5

Hi mozilla

I have report a big problem on firefox, it's a password stealer and program name is "Firefox Stealer"

I think this is big bug, if someone install this, it lose all password on firefox and MSN password.

Please mozilla solve this problem.Antivirus or firewalls doesn't stop this.

Reproducible: Always

Comment 1

[chris hofmann]

do you have any more details on how this program gets installed on systems or where it can be downloaded from?

Comment 2

[OnuR]

I install it from keygen, it's hide on in.

Comment 3

[OnuR]

I install it from keygen, it's hide on in.

Comment 4

[chris hofmann]

> I install it from keygen
> it lose all password on firefox and MSN password.

When you install keygen, does Firefox Stealer get automatically installed?

Does the Firefox Stealer run automatically, or are their steps that you take to run the program?

Exactly what happens when the program runs?

Does it just reveal passwords on your computer, or are the passwords also transmitted or made available to a remote computer?   

or are the passwords compromised in some other way?

Thanks for reporting and helping to investigate this.

Comment 5

[Aakash Desai [:aakashd]]

Reporter, any update on your investigation of this issue? Thanks!

Comment 6

[Jesse Ruderman]

Being the target of local malware is not a Firefox security hole, as there isn't anything Firefox can do about it.  But I believe dveditz likes to know what kinds of malware are hooking into Firefox.