I would expect the malware to sit there quietly until it collected at least a few interesting passwords. So it sort of depends on what the attacker is trying to do and how many interesting accounts the attacked has.
Yeah, I figure you've got a good month before they do something with the collected accounts, or more depending on who they sold it to.
At the very least, never save a password to a critical account, such as a financial account or a root/administrator password. I could care less if someone takes over my Twitter and Facebook (if I had them) but am highly paranoid about accounts which will actually affect my life.
Comments
I would expect the malware to sit there quietly until it collected at least a few interesting passwords. So it sort of depends on what the attacker is trying to do and how many interesting accounts the attacked has.
Yeah, I figure you've got a good month before they do something with the collected accounts, or more depending on who they sold it to.
At the very least, never save a password to a critical account, such as a financial account or a root/administrator password. I could care less if someone takes over my Twitter and Facebook (if I had them) but am highly paranoid about accounts which will actually affect my life.