Skip to main content

Font Not Found Message In Firefox Could Carry Nasty Malware

By May 22, 2017May 25th, 2021Cybersecurity

Several months ago, a nasty malware attack caused quite a stir among Google Chrome users.

After a flurry of activity, it went dormant. Now, it seems to have returned, and this time, it’s targeting Firefox users. The basic form of the attack is unchanged, however. From the user’s perspective, it looks like this:

You surf to a webpage that is unreadable. You get a popup message that says “The HoeflerText” font was not found. The message box helpfully provides an update button that supposedly allows you to install the font on your computer.

When you click the button, though, rather than getting the font, you get a banking trojan called Zeus Panda. It will then log your password, and it can initiate rogue transactions in your name.

Unfortunately for the hackers, they didn’t bother to change the name of the font. “HoeflerText” was the exact bogus font name they used a few months ago when they targeted Chrome users, and by now, is quite well known.

Even if it weren’t, this is a fairly crude, heavy-handed attack that only fools a small percentage of users.

The simplest way to avoid having the malware installed is to simply close the browser window any time you see a page load that contains garbage characters and asks you to install a new font, regardless of the font name. It’s almost certainly a trap.

If you do inadvertently click to install the font, contact a member of your IT staff immediately, and don’t do anything else with or on the PC until the malware is removed.

Remember, once this malware is armed with your credentials, it can initiate transactions on its own. From the bank’s perspective, every transaction this malware initiates appears to be perfectly legitimate, which can cause you no end of trouble, and be extremely difficult to reverse.

Chris Forte

Chris Forte, President and CEO of Olmec Systems, has been in the MSP workspace for the past 25 years. Chris earned his Master’s Degree from West Virginia University, graduating Magna Cum Laude. He was a past member of the Entrepreneurs’ Organization, a current member of the New Jersey Power Partners and Executive Association of New Jersey, where he has previously served on its board of directors. In his spare time, Chris enjoys traveling with his family. He also admits to being a struggling golfer and avid watcher of college football and basketball. He currently lives in Boonton Township, NJ with his wife, two daughters, son, and black lab Luna.