[sho-dan]

Virus writers have latched onto the popularity of Firefox with a new variant on the established practice of stealing online banking passwords.
A password pinching Trojan that poses as a Firefox Plugin is doing the rounds, Romanian security firm BitDefender warns. ChromeInject-A is typically downloaded onto Windows PCs already compromised by other strains of malware

Firefox plug-in Trojan harvests logins ? The Register

a bit more info on this bugger

More details on the bank sites targeted, along with the general behaviour of the Trojan, can be found in a write-up by BitDefender

Trojan.PWS.ChromeInject.B