Mozilla is dealing with another case of a malicious plug-in for its Firefox web browser, and as a result, is considering changes to its code review process. The company on Monday removed the "Mozilla Sniffer" add-on from its archive and added it to what it terms a "blocklist," according to a vulnerability announcement released this week. Mozilla learned on Monday that the plug-in contains code that hijacks login details, such as username and password, submitted to any website. By Mozilla adding the malicious plug-in to its blacklist, users who have installed the program will receive a prompt suggesting they uninstall it. According to the browser maker, the add-on has been downloaded about 1,800 times since it was uploaded to the library on June 6, and there were 334 active daily users as of Tuesday.
**Hidden Content: To see this hidden content your post count must be 1 or greater.**


Reply With Quote
