Firefox
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Malware reported by Cyber Security NewsNIK C2 malware abuses OpenAI API for credential theft and remote control
Recent news
Byoky: open-source wallet keeps AI API keys encrypted on the user's device
Byoky is an open-source wallet for AI API keys from OpenAI, Anthropic, Google Gemini and other providers, available as Chrome and Firefox extensions and as iOS and Android apps. Keys are encrypted on the user's device, and the wallet sends provider requests on behalf of apps, which receive only a session token while the key stays in the wallet.
Google's 2010 Pac-Man doodle unexpectedly auto-played in Firefox via an extension
Google's 2010 Pac-Man doodle was set to start automatically after ten seconds of inactivity on google.com. The CoolPreviews Firefox extension opened the homepage invisibly when Firefox launched, which triggered unexpected game audio. The developer, Marcin Wichary, pushed a same-day patch adding a mute button and requiring a click before the game and its sounds could start.
NIK C2 malware abuses OpenAI API for credential theft and remote control
NIK C2 is a Go-based Windows remote access implant that communicates over TLS WebSockets on port 443 with an HTTP backup channel, using AES-256-GCM encryption and rotating across three server tiers. Its aigenerate command sends attacker prompts to the OpenAI Chat Completions endpoint from the victim's machine, and if no API key is supplied it falls back to the victim's OPENAIAPIKEY environment variable. Cisco Talos, which published its findings, reports credential and crypto-wallet theft, a keylogger, hidden VNC, and a screen-locking ransomware module that does not encrypt files.