Suspicious 80% firefox 8 installs Download

GF Diagnostico Usuarios 6.0.1

Steals credentials, exfiltrates data

“Monitoramento e técnica de problemas de acesso em portais web. Captura requisições de autenticação (login/token) para diagnóstico.”

Generic local API POSTArchive contains Mozilla COSE digest manifest
SHA-256fd8e21d629f716b1946cf0ecb91c5c44f9aca0d4f0a467bac5c57117084e42df
URLhttps://addons.mozilla.org/firefox/downloads/file/5044990/gf_diagnostico_usuarios-6.0.1.xpi
MaleculeO₃(CCo₂I₂)H₆(Br₇Cm₁₅Db₁₁Os₂Po₂U₅)Md₄(Pm₈PtSi)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.