Mozilla confirms infected Firefox add-ons slipped through security. Malware hidden in two extensions to the Firefox browser threatens Windows users. Mozilla
late Thursday confirmed that it had failed to detect malware
in a pair of Firefox
add-ons, which may have infected up to 4,600 users.
The add-ons have been removed from Firefox's official add-on download site
According to an entry on the Mozilla Add-ons blog
, Sothink Web Video Downloader 4.0 and all versions of Master Filer were infected with Trojan horses designed to hijack Windows PCs. Both add-ons were in the "experimental" area of Firefox's add-on download site, where newer extensions remain until they undergo a public review process. To install experimental add-ons, Firefox users must view and accept an additional warning.