Sophos has posted a blog entry about a malware that disguises itself as a Flash Player plugin for Mozilla’s Firefox web browser. It is detected as Troj/FFSpy-A.

According to the blog entry, it collects your Google searches and inject ads onto websites based on your searches.

It spreads via internet forums.

Two images are included in the post. First is an installation screenshot. The other is an add-on list in Firefox which shows that Adobe Flash Player 0.2 has been installed.

Source: Sophos