Botnet Enlists Firefox Users to Hack Web Sites
Summary: A botnet dubbed "Advanced Power" has ensnared more than 12,500 systems by disguising itself as a Firefox add-on called "Microsoft .NET Framework Assistant," forcing infected PCs to test nearly every page the victim visits for SQL injection flaws. According to the botnet's administrative panel, the bots have helped discover at least 1,800 Web pages vulnerable to SQL injection, and Mozilla later added the fraudulent add-on to its block list.
What's compelling: The malware turns ordinary browsing by 12,500 infected desktops into a distributed scanning platform, using valid end-user requests to probe sites the attackers could not otherwise reach - and it has already surfaced 1,800 vulnerable pages.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026