Malware Hidden in Firefox Extensions' Icons in GhostPoster Campaign

Malware Hidden in Firefox Extensions' Icons in GhostPoster Campaign

First seen 18 Dec 2025, 02:53 UTC •BleepingcomputerScworld •87% similarity •30.6

Article Content

Browse articles
ThreatCluster

A campaign named 'GhostPoster' has embedded malicious JavaScript in the icons of 17 Firefox extensions, which have been downloaded over 50,000 times. This malware facilitates browser activity tracking and allows attackers to deploy backdoors for hijacking affiliate links and committing fraud. Mozilla has removed the affected extensions following the discovery of the malicious code.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →