Firefox users need to increase alertness. The malware a password thief take Firefox users.

Disclosed by researchers at BitDefender, identified the malware as this Trojan.PWS.ChromeInject.A steal banking passwords on the site. However, this malware only take Firefox users, such as quoted from Infoworld, Friday (5/12/2008).

Malware is located in the Firefox add-ons, and will be explored when Firefox started to operate.

This Trojan uses the JavaScript file to filter the data that is sent to the user more than 100 sites and transfer of money banks, including Bank of America, Barclays, Lloyds TSB, Halifax dan Wachovia and PayPal site. The stolen passwords and then sent to a server in Russia.

“Users should be aware that without the appropriate security solutions, their system is threatened,” said the Viorel Canja, head of BitDefender lab.