I found a fake Firefox update

Revision Information
  • Revision id: 131852
  • Created:
  • Creator: philipp
  • Comment: update article with more information, screenshot and suggestion to install adblocking addons
  • Reviewed: Yes
  • Reviewed:
  • Reviewed by: Noah_SUMO
  • Is approved? Yes
  • Is current revision? No
  • Ready for localization: No
Revision Source
Revision Content

We have received reports from many users who were interrupted in their browsing experience and who got redirected to a fake page purporting to provide an "urgent update" and prompting to download a firefox-patch.js (or .exe) file. This is a scam tactic trying to trick you into installing malware!

Note: Firefox has an automated background update mechanism which will never prompt you to manually download and execute a file. In addition you can always trigger a search for updates within Firefox yourself - to learn how, see Update Firefox to the latest release.

To our knowledge those notices are a form of "malvertising": those fake notices get triggered by code contained in ads that are displayed on otherwise legitimate websites you are visiting and get spread through advertisement networks. This is an example how such a fake update notice may look like - they are hosted on randomly generated and quickly changing domains:

Fake urgent update

What you can do if you spot a fake update notice?

  1. Never save and open/run unsolicited files!
  2. Install an ad-blocking addon from addons.mozilla.org to avoid such kind of malvertising in the future.
  3. Report web forgeries to the Google Web Forgery site.

What you can do to prevent malware on your computer

  1. Run a malware scan on your computer to make sure your computer was not infected. (See Troubleshoot Firefox issues caused by malware.)
  2. Avoid downloads from unreliable sources in the future.

To learn more about malware

Although we cannot root out every bad actor on the web, knowing how to recognize and report such frauds helps us keep the Internet open and safer.