Skip to main content

Firefox Clipboard Hack Attack

In a way, you have to admire scammers – they can be so damn inventive. The latest incident of hacking seems to show a remarkable degree of inventiveness, anyway.

It hits both Windows and Mac users of the Firefox browser, according to the BBC. When you copy some information, the attack inserts a hard-to-delete link. Follow it and you find yourself at a site selling fake security software.

How does it work? It manages to exploit Adobe Flash files so they constantly flush other text from the clipboard and insert the link. Those who’ve been infected, writing in forums, have found that either stopping the Firefox process or rebooting have proved the only solutions to the problem.

Mikko Hypponen, chief research officer at security firm F-Secure, said:

"It’s an interesting attack, but doesn’t seem to be very widespread at the moment. I don’t remember seeing this before."

"It is a pretty clever technique. Our work would be so much easier if our enemy would be stupid."

Editors' Recommendations

Digital Trends Staff
Digital Trends has a simple mission: to help readers easily understand how tech affects the way they live. We are your…
Akamai foils massive DDoS attack in Asia that reached 900Gbps
An Illustration shows a programmer busy with a laptop and several monitors.

Akamai has just mitigated a distributed denial of service (DDoS) attack of epic proportions. While it was short-lived, it was very intense, and it most likely could have easily taken the target server offline.

It was the largest-ever DDoS attack launched against a target in the Asia-Pacific region. Despite the scale of the attack, Akamai was able to block it entirely.

Read more
LastPass reveals how it got hacked — and it’s not good news
A depiction of a hacker breaking into a system via the use of code.

Last year was a particularly bad one for password manager LastPass, as a series of hacking incidents revealed some serious weaknesses in its supposedly rock-solid security. Now, we know exactly how those attacks went down -- and the facts are pretty breathtaking.

It all began in August 2022, when LastPass revealed that a threat actor had stolen the app’s source code. In a second, subsequent attack, the hacker combined this data with information found in a separate data breach, then exploited a weakness in a remote-access app used by LastPass employees. That allowed them to install a keylogger onto the computer of a senior engineer at the company.

Read more
Hackers used 30,000 computers for record-breaking DDoS attack
An illustration of a grid of devices with one in red, infected device highlighted.

Hackers launched a record-breaking distributed denial of service (DDoS) attack over the weekend, employing a network of botnets to make requests from over 30,000 IP addresses.

While that isn't a big network of computers, the onslaught was able to exceed 71 million requests per second (rps), surpassing the previous record of 46 million rps set in June 2022 by 35%. This is what's known as a volumetric attack that consumes the target website's bandwidth by sending large amounts of data from multiple sources at once.

Read more