

Where this malware differs is it has the effective and rarely used ability to utilize forged dialogs to deceive users into revealing their two-factor authentication (2FA) and then withdraw cryptocurrencies in the background. Rilide is not the first malware SpiderLabs has observed using malicious browser extensions. Rilide malware is disguised as a legitimate Google Drive extension and enables threat actors to carry out a broad spectrum of malicious activities, including monitoring browsing history, taking screenshots, and injecting malicious scripts to withdraw funds from various cryptocurrency exchanges. If you have ideas or questions, or need help migrating a legacy add-on to WebExtensions APIs, you can reach us on the Add-ons Discourse or in the Add-ons room on Matrix.Trustwave SpiderLabs uncovered a new strain of malware that it dubbed Rilide, which targets Chromium-based browsers such as Google Chrome, Microsoft Edge, Brave, and Opera. The API is also fully compatible with multiprocess Firefox. Extensions written for these browsers will in most cases run in Firefox or Microsoft Edge with just a few changes. To a large extent, the API is compatible with the extension API supported by Google Chrome and Opera. Either way, you can enhance the built-in Firefox developer tools by adding a new tab to the developer toolbar.Įxamples: Web Developer, Web React Developer Tools, and aXe Developer Tools.Įxtensions for Firefox are built using the WebExtensions APIs, a cross-browser system for developing extensions. Games: Offer traditional computer games with off-line play features, or explore new game possibilities for example, by incorporating gameplay into everyday browsing.Įxamples: Solitaire Card Game, and 2048 Prime.Īdd development tools: You may provide web development tools as your business or have developed a useful technique or approach to web development that you want to share.

And, you can enhance almost any website's features or functionality, it doesn't have to be your website.Įxamples: Swimlanes for Trello and Tomato Clock. With flexible UI options and the power of the WebExtensions APIs you can easily add new features to a browser.
EXTENSIONS FOR FLUID BROWSER UPDATE
With the ability to access and update both a page's HTML and CSS, extensions can help users see the web the way they want to.Įxamples: uBlock Origin, Reader, and Toolbox for Google Play Store™.Īdd tools and new browsing features: Add new features to a taskboard, or generate QR code images from URLs, hyperlinks, or page text. Extensions may also enable users to update the look of the Firefox UI, the same way standalone theme add-ons do.Įxamples: MyWeb New Tab, Tabliss, and VivaldiFox.Īdd or remove content from web pages: You might want to help users block intrusive ads from web pages, provide access to a travel guide whenever a country or city is mentioned in a web page, or reformat page content to offer a consistent reading experience. Let users show their personality: Browser extensions can manipulate the content of web pages for example, letting users add their favorite logo or picture as a background to every page they visit. Allow users to collect details from pages they visit to enhance the service you offer.Įxamples: Amazon Assistant for Firefox, OneNote Web Clipper, and Grammarly for Firefox. Here are just a few examples of the things you can do:Įnhance or complement a website: Use an add-on to deliver additional in-browser features or information from your website. This means that you can do a lot more in an extension than you can with code in a web page. It can take advantage of the same web APIs as JavaScript on a web page, but an extension also has access to its own set of JavaScript APIs. It's created using familiar web-based technologies - HTML, CSS, and JavaScript.

Visit Firefox Extension Workshop to learn more about the workflow for testing, publishing, and extensions for Firefox.Īn extension adds features and functions to a browser. Then, use the reference documentation to start building your extension. Note: If you are already familiar with the basic concepts of browser extensions, skip this section to see how extension files are put together. Differences between API implementations.
