Phishers catch out Firefox

[Nomad559]

Phishers catch out Firefox

A security flaw in the increasingly popular Firefox browser is exposing millions of users to phishing scams, security experts have warned.

Jakob Balle, security specialist at Secunia Research, said that the vulnerability in Firefox and Mozilla allows malicious hackers to execute phishing scams by spoofing the source URL displayed in the browser's Download Dialog box.

"The problem is that long sub-domains and paths are not displayed correctly, which can be exploited to obfuscate what is being displayed in the source field of the Download Dialog box," he said.


Firefox flaw sparks a fiery debate

TalkBack: Our article reporting the discovery of a security hole in Firefox had elicited a wide range of opinions - both from fans of the open source browser, and those who are less enamoured with it

The news that the Firefox browser contains a flaw that could help cybercriminals to carry out phishing attacks stirred up plenty of reaction and discussion among ZDNet UK readers.

Security firm F-Secure warned on Wednesday that the vulnerability, which allows the URL in a Firefox download dialog box to be spoofed, could be exploited by online fraudsters.

http://secunia.com