An unusual botnet that disguises itself as a legitimate add-on for Mozilla Firefox to perform website vulnerability scanning. The botnet, dubbed Advanced Power by its authors, is operative at least since May 2013, infected machines are recruited to conduct a vulnerability assessment on targeted systems and to serve malware, in particular bots conducts SQL injection attacks on every website visited by the victims. The malware variant classified as so.exe by virus total have a very low detection rate. There is no confirmation on the origin of the botnet.”]
Source: https://securityaffairs.co/wordpress/20510/cyber-crime/advanced-power-bonet-firefox.html