Fake Firefox update bundles Trojan add-on

Scammers are attempting to trick Firefox users into downloading backdoored software via spam emails that supposedly advertise an "update" to the open-source browser.

An email entitled 'New version released' includes a link to what it says is a quick download of code and 'security fixes'. It says the company has developed the fix and it will ensure users have 'the safest version of Firefox available'. Here's a part of the e-mail:

"A Firefox software update is a quick download of small amounts of new code to your existing Firefox browser. These small patches can contain security fixes or other little changes to the browser to ensure that you are using the best version of Firefox available.

"Firefox is constantly evolving as our community finds ways to make it better, and as we adjust to the latest security threats. Keeping your Firefox up-to-date is the best way to make sure that you are using the smartest, fastest and most importantly safest version of Firefox available."

The trojan, identified by Sophos as Troj/PWS-BSF, is reportedly capable of stealing passwords.

Read more -here-

• OpenAI is reportedly working on a search feature for ChatGPT
• TikTok, ByteDance sue to block US law seeking sale or ban of app
• OpenAI partners with Stack Overflow to make models better at coding
• Dropbox breach exposes customer credentials, authentication data
• Google: Passkey authentications top 1 billion across 400 million accounts
• FTC fines Razer for misrepresenting COVID masks as N95s