Hostile 92% firefox 4 installs Download

Facilita 1.2.420

Credential theft, excessive permissions, obfuscation

“Automatiza processos de cálculo com segurança e rastreamento.”

Extension uploads page text with login credentialsWheel import silently launches a bundled executable
SHA-256a67db0441ccd8b6823ca6c03153930fe7416e5ae66ec628afc44b930b7ef1de2
URLhttps://addons.mozilla.org/firefox/downloads/file/4990006/facilita-1.2.420.xpi
MaleculeK(Li₅)O₉(EuS₃AlAs₅CaDy₃ErPXe₂)H₁₁(Cm₇₆Cr₈Db₅₉Ds₃F₂₆Hf₄Os₂₃Po₄₇Ti₅U₁₄)Md₁₁(Bi₄Bk₄InPa₅PdPtSi)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.