Through this attack scenario, researchers managed to exploit popular Firefox add-ons to carry out malicious actions.

The researchers showcased their exploit by carrying out a live experiment in the conference.

Mozilla reviewers approved the extension without any red flags.

Top Firefox extensions may be invitations for malware attacks

Mozilla said that the researchers findings were hypothetical in nature.

The way add-ons are implemented in Firefox today allows for the scenario hypothesized and presented at Black Hat Asia.

Extension reuse attack explained

spot_img

source: www.techworm.net