Fake Firefox update conceals password-stealing malware

Surprise! This ‘fox has a horse inside – a Trojan horse, that is. Computer users were warned this week against a Trojan horse malware hidden in an email message supposedly offering an update for Mozilla’s Firefox web browser. "There are no surprises here. The link downloads an executable file, which bundles together an installer for Mozilla Firefox 5.0.1 and... a password-stealing Trojan horse," Sophos senior technology consultant Graham Cluley said in a blog post. He said the subject of the email reads "New version released," referring to the popular Firefox browser. The message body urges the user to click on the link to update his or her version of Firefox. However, clicking on the link will download Troj/PWS-BSF. On the other hand, Cluley said Firefox automatically updates itself – "so you should never have to act upon an email like this." — RSJ, GMA News