A new trojan uses actual Mozilla Firefox browser extensions as an entryway into an unsuspecting user’s machine. The FormSpy spyware trojan was spotted again late yesterday making the rounds via a spam email. The malware is installed as a Firefox extension, unbeknownst to the user, when he or she downloads an attachment in the message. The message poses as Dell or Wal-Mart, for instance, thanking the user for shopping with them and says information on their order is in the attachment.”]
Source: https://www.darkreading.com/analytics/trojan-uses-firefox-add-on