Mozilla confirms infected Firefox add-ons slipped through security. Malware hidden in two extensions to the Firefox browser threatens Windows users. Mozilla late Thursday confirmed that it had failed to detect
malware in a pair of
Firefox add-ons, which may have infected up to 4,600 users.
The add-ons have been removed from Firefox's
official add-on download site.
According to an entry on the
Mozilla Add-ons blog, Sothink Web Video Downloader 4.0 and all versions of Master Filer were infected with Trojan horses designed to hijack Windows PCs. Both add-ons were in the "experimental" area of Firefox's add-on download site, where newer extensions remain until they undergo a public review process. To install experimental add-ons, Firefox users must view and accept an additional warning.