My humble opinion, where is the FF or Flock certification system. Now they confonted with the lack of plug-in security. Their only advise was One Password.
Discovered from the wild, this malware was downloaded and installed by the Downloader-AXM trojan.
So it pays to ensure your security tools are up to date and prevent the trojan downloader getting established in the first place. Also ensure you have good outbound firewall protection to at least alert you to any unauthorised outbound connection that the downloader may attempt if it does manage to get past your defences.
This development had to be expected, when add-ons came in like AllPeers, see http://software.newsforge.com/software/06/06/20/1940233.shtml?tid=130&tid=13
which seem safe at first sight, but controversial at least in some respects.
So here it is the same old routine, download only from a reliable source, check and doublecheck, and everybody knows the old saying: “Curiosity killed the cat or your computer integrity in this case”.
Therefore it is curious that youngster these days not even seem to care one bit or byte to minimalize the risk of viruses and other malware, it is just part of the bargain they think, they reinstall easier as you can blink your eyes, while they don’t think how they endanger the security of others during the process. Irresponsible behaviour or just plain stupidity, I don’t know where this stems from.