PayPal could be hacked thought the Firefox flaw!

Aviv Raff, an Israeli leading security researcher, has warned, that a flaw in the Firefox 2.0.0.11 - Mozilla's latest version - logons' handling could redirect the entered username and password to the hacker's server instead of the real one and could therefore be used by identity thieves to dupe users into disclosing passwords.

A fake web page with a link to a trusted website (a bank, a PayPal account, webmail, etc.) could be created, too. After the victim's click on the link, the trusted web page will be opened in a new window, and a malware script will redirect this new window right to the attacker's web server, which will then return the specially crafted basic authentication response.