Firefox plugin infected with Trojan

A Trojan-infected Vietnamese language pack for the Firefox Web browser was available for download from the open-source Web browser’s official add-on site for months.

Mozilla, which oversees the project, announced the problem on its security blog on Wednesday, saying people should disable the add-on pack for now.

“Everyone who downloaded the most recent Vietnamese language pack since February 18, 2008, got an infected copy,” Mozilla said. “While we cannot determine the exact number of compromised downloads, there have been 16,667 total downloads of the Vietnamese language pack since November 2007, so we anticipate the impact on users to be limited.”

The author of the add-on pack, who acknowledged on Thursday that his machine had been infected, isn’t suspected of any intentional harm, according to the discussion of the problem. The author offered a cleaned-up version Thursday that so far appears OK.

Mozilla scans its files for viruses, Trojans, and other problems. But the file had been uploaded nearly two months before the antivirus software could detect the Trojan in question, called Xorer.

(Via News.)