🧰 Mozilla Firefox

The items that name it 8

• 16 Malicious Firefox Extensions Steal Cryptocurrency Wallet Credentials
  writeup2026-10-07

  Browser platform hosting the 16 malicious extensions; Mozilla unpublished them as of October 5

• Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
  writeup2026-09-23

  Browser platform on which the malicious extension pdf-para-texto@extensao.local was installed and executed

• The Closed Quorum: Inside the First Reported Autonomous AI C2 Implant
  writeup2026-09-22

  Targeted for saved browser credential theft via dumpBrowserCredentials()

• Socket: Malicious Extensions Drain Axiom Trade and Padre Crypto Sessions
  writeup2026-09-12

  browser hosting malicious extensions VREO (Firefox) and Orbit Tracker

• GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI
  article2026-09-08It is written here as Mozilla Firefox (recently patched n-day with LLM-generated exploit artifacts).

  recently patched n-day with LLM-generated exploit artifacts

• Potemkin Loader & RMMProject The Anatomy of a ClickFix Attack
  writeup2026-06-16

  Targeted for credential/cookie theft via NSS key database (metadata/nssPrivate tables), ASN.1 decoding, PBKDF2 + 3DES-CBC decryption.

• AI-Assisted Vulnerability Discovery
  article2026-05-15

  156.9% YTD increase in CVE disclosures; participant in Project Glasswing

• ClickFix Removes Your Background but Leaves the Malware
  writeup2026-04-30

  Profiles enumerated via profiles.ini for credential theft