A password-stealing add-on slipped into Firefox s extension gallery more than a month ago had been downloaded nearly 2,000 times before it was detected. New versions of the ransomware now sniff out saved credentials for Internet Explorer, Mozilla Firefox, Mozilla Thunderbird, Google Chrome and Microsoft Outlook. The release of Firefox 73 fixed high-severity memory safety bugs that could cause arbitrary code execution and missing bounds check that could enable memory corruption. Read the full article here: Ransomware now sniffes out saved passwords for several major websites.
Source: https://threatpost.com/mozilla-pulls-password-stealing-firefox-add-071410/74210/