Suspicious 80% firefox 1 installs Download

Proxy Switcher 1.0.0

Typosquatting, broad permissions, new publisher

“Easy-to-use HTTP and SOCKS proxy switcher with support for multiple proxy servers, authentication, and quick switching between configuratio…”

Extension can proxy all browser trafficArchive contains Mozilla COSE digest manifest
SHA-2560c02b3339c5800ed3903571627f901b60fd013fe0257b1a25e7a9eced3e49811
URLhttps://addons.mozilla.org/firefox/downloads/file/5041077/my_proxy_switcher-1.0.0.xpi
MaleculeO(Co₂)H₆(Br₅Cm₃Db₇OsPoU₈)Md₄(Pm₄PtSi)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.