Hostile 100% firefox 2,581 installs Download

Qui-Quo 2.3.2

Credential theft and obfuscation

“Подборка туров клиенту в два клика!”

Browser extension forwards captured login credentials to a hardcoded remote hostBuilt bundle ends with a remote script injector

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.