X
Tap here to go to the mobile version of the site.

Support Forum

Urgent Fire Fox Update Notice

Posted

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

I keep getting a screen popping up that says "Urgent Firefox Update". My protection software is blocking it, saying it's a Trojan. When I go to Mozilla, it says my Firefox is up to date. Is there an Urget Update or not?

Chosen solution

Hi

We are aware of this issue are are working to resolve it. From what you are saying this is almost certainly malware.

Firefox will always update from within the browser and not from a random web page. If you ever unsure of whether you are using the most recent version, this page will walk you through how to check.


Comment added by a forum moderator Please also see our help article

If you do see one of these fake updates please as a reply to this thread post the web address of the fake orange page and if possible the address of the genuine website it appears to have come from - the back arrow on the address bar of the orange page may sometimes help find that.

Read this answer in context 236

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 15.16.20045
  • NPRuntime Script Plug-in Library for Java(TM) Deploy
  • Next Generation Java Plug-in 11.91.2 for Mozilla browsers
  • The plug-in allows you to open and edit files using Microsoft Office applications
  • Office Authorization plug-in for NPAPI browsers
  • Shockwave Flash 22.0 r0
  • 5.1.41212.0
  • Skype for Business Web App Plug-in
  • NPWLPG
  • iTunes Detector Plug-in

Application

  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0

More Information

DK-DK 0 solutions 3 answers

They seem to be popping up in several locations. Here is one from 15 minutes ago:

https://hoaphpdf995.net/728409453326/54d51d35014d52ec91efea9bc7426a84/bba70f43f6c661580abcf553b4523e00.html

They seem to be popping up in several locations. Here is one from 15 minutes ago: https://hoaphpdf995.net/728409453326/54d51d35014d52ec91efea9bc7426a84/bba70f43f6c661580abcf553b4523e00.html
mykdonna 0 solutions 10 answers

I installed the "Ublock" app for firefox & have not had a problem since, this was a month or more ago. Not sure how it works, but it works.  :-)

I installed the "Ublock" app for firefox & have not had a problem since, this was a month or more ago. Not sure how it works, but it works. :-)
troubleshooter 0 solutions 13 answers

another FF spoof:

spoof URL: https://eechatravelwithamate.org/3043093405316/737641be61c9c1a799a2541af560925e/70fef5718caf55e5116e0263d877d417.html

page I was on when it happens: http://www.twincitiesgasprices.com/index.aspx?mss=263700


Some observations: I notice the cookie expires shortly or simultaneously with the redirect. There are only 2 entries in the cookie each time; 'land' and 'k'.

Also, I refreshed the one from yesterday, to see if it would still render the image. Earlier (and previously) it goes to a blank white page, but this last time, I got a Firefox blocked website notice, stating the certificate had an issue: It said the certificate was only authorized for use with the following websites; and had about a dozen listed, all with either 'bing' or 'microsoft' in the URL, mostly. (one was something else, but not the spoof domain).

Mr KL

another FF spoof: spoof URL: https://eechatravelwithamate.org/3043093405316/737641be61c9c1a799a2541af560925e/70fef5718caf55e5116e0263d877d417.html page I was on when it happens: http://www.twincitiesgasprices.com/index.aspx?mss=263700 Some observations: I notice the cookie expires shortly or simultaneously with the redirect. There are only 2 entries in the cookie each time; 'land' and 'k'. Also, I refreshed the one from yesterday, to see if it would still render the image. Earlier (and previously) it goes to a blank white page, but this last time, I got a Firefox blocked website notice, stating the certificate had an issue: It said the certificate was only authorized for use with the following websites; and had about a dozen listed, all with either 'bing' or 'microsoft' in the URL, mostly. (one was something else, but not the spoof domain). Mr KL
bobbiker 0 solutions 4 answers

Why can't you prevent this? Seems like anyone who invents a browser like firefox can prevent it from being hacked like this. I see it's been going on for a long time and many people get it.

https://akotajamestimothywhite.org/9811657533539/14e94770cbe43d93ba29601764895f80/3f244f7747e2621f1afa0b63a4ff1898.html

Bummed in Seattle.

Why can't you prevent this? Seems like anyone who invents a browser like firefox can prevent it from being hacked like this. I see it's been going on for a long time and many people get it. https://akotajamestimothywhite.org/9811657533539/14e94770cbe43d93ba29601764895f80/3f244f7747e2621f1afa0b63a4ff1898.html Bummed in Seattle.
markem 0 solutions 4 answers

@bobbiker

Several years ago someone on SlashDot asked the same question of Microsoft. I'm not particularly fond of Microsoft but the person was threatening to expose the gigantic hole they had found in windows. I felt then (and now) like I should respond. Having been in the computer field since 1972. (Long before Microsoft or Mozilla.)

You can't think of a large organization like Mozilla (or even Firefox) like a Ferrari. You have to think of them as a train. A Ferrari is fast. It takes corners at 120mph, burns rubber, looks great, and sometimes has a fantastic looking person driving it. A train on the other hand is slow to pick up speed, very slow to stop, doesn't take corners very well, and usually has some guy with stubble on his chin, wearing dumpy kinds of clothes, and generally would appear on some poster for the poor and homeless. In other words - it takes time and it isn't glamorous to try to figure out the corrections needed in order to fix a problem they never created. They were trying to create the best browser they could, make it be able to handle over a hundred different languages' needs, 300 graphical file formats, hundreds of audio file formats, and not to mention the hundreds of software interfaces to such things as Java, Javascript, VBScript, Perl, Pascal, C/C++, FORTRAN, COBOL, and hundreds of other computer languages. This means they can't stop on a dime and change directions. Everyone has to be notified, everyone talks about what to do, the best solution is poked and prodded to make sure it is the best solution, everyone's input is taken in to account, and eventually, a patch is issued. The worse the problem is - the longer it takes to make a decision so they don't break anything. So whereas a Ferrari would take a month to do anything - a train may take six months to a year to be able to do anything.

What you are saying is - Why don't they act like a Ferrari? But a Ferrari acts on its own or maybe has one or two passengers that go along with the driver. A train carries many passenger cars. Each of these passengers is one of the people who are working to make things right. But each one has to be gotten to, talked with, and their input taken. And this is the biggest problem. Because these passengers are really scattered all over the world with different time zones, needs, work schedules, etc.... It is why FireFox is free. All of these people (or maybe most of them) are donating their time so the rest of us can enjoy a wonderful browser.

So be patient. Let the train come to a stop, switch tracks, and start down the new track. When it reaches its destination we will all be given the update to take care of this. But right now, the train is slowing down and everyone on board is talking about what to do about the problem and which track to take to fix the problem. So we will get there but you have to be patient a while longer.

And no - I'm not trying to talk down to you. Just trying to put into perspective the difference between a small company and a large corporation. FireFox used to be small - now it is multi-national and has developers in all parts of the globe. So it has gone from being a Ferrari to being a train. A very nice, sleek, modern train - but a train nonetheless and trains, by their very nature, have a hard time changing course.

I am sure everyone thanks you for your patience. :-) And no - I do not work for Microsoft or FireFox. Actually, I'm out of work presently and just limping along month to month. :-) Pretty soon I'm going to be going "Gollum! Gollum! My Precious!" (and eating raw fish I find in the ditch!) :-)

@bobbiker Several years ago someone on SlashDot asked the same question of Microsoft. I'm not particularly fond of Microsoft but the person was threatening to expose the gigantic hole they had found in windows. I felt then (and now) like I should respond. Having been in the computer field since 1972. (Long before Microsoft or Mozilla.) You can't think of a large organization like Mozilla (or even Firefox) like a Ferrari. You have to think of them as a train. A Ferrari is fast. It takes corners at 120mph, burns rubber, looks great, and sometimes has a fantastic looking person driving it. A train on the other hand is slow to pick up speed, very slow to stop, doesn't take corners very well, and usually has some guy with stubble on his chin, wearing dumpy kinds of clothes, and generally would appear on some poster for the poor and homeless. In other words - it takes time and it isn't glamorous to try to figure out the corrections needed in order to fix a problem they never created. They were trying to create the best browser they could, make it be able to handle over a hundred different languages' needs, 300 graphical file formats, hundreds of audio file formats, and not to mention the hundreds of software interfaces to such things as Java, Javascript, VBScript, Perl, Pascal, C/C++, FORTRAN, COBOL, and hundreds of other computer languages. This means they can't stop on a dime and change directions. Everyone has to be notified, everyone talks about what to do, the best solution is poked and prodded to make sure it is the best solution, everyone's input is taken in to account, and eventually, a patch is issued. The worse the problem is - the longer it takes to make a decision so they don't break anything. So whereas a Ferrari would take a month to do anything - a train may take six months to a year to be able to do anything. What you are saying is - Why don't they act like a Ferrari? But a Ferrari acts on its own or maybe has one or two passengers that go along with the driver. A train carries many passenger cars. Each of these passengers is one of the people who are working to make things right. But each one has to be gotten to, talked with, and their input taken. And this is the biggest problem. Because these passengers are really scattered all over the world with different time zones, needs, work schedules, etc.... It is why FireFox is free. All of these people (or maybe most of them) are donating their time so the rest of us can enjoy a wonderful browser. So be patient. Let the train come to a stop, switch tracks, and start down the new track. When it reaches its destination we will all be given the update to take care of this. But right now, the train is slowing down and everyone on board is talking about what to do about the problem and which track to take to fix the problem. So we will get there but you have to be patient a while longer. And no - I'm not trying to talk down to you. Just trying to put into perspective the difference between a small company and a large corporation. FireFox used to be small - now it is multi-national and has developers in all parts of the globe. So it has gone from being a Ferrari to being a train. A very nice, sleek, modern train - but a train nonetheless and trains, by their very nature, have a hard time changing course. I am sure everyone thanks you for your patience. :-) And no - I do not work for Microsoft or FireFox. Actually, I'm out of work presently and just limping along month to month. :-) Pretty soon I'm going to be going "Gollum! Gollum! My Precious!" (and eating raw fish I find in the ditch!) :-)

Modified by markem

Happy112 561 solutions 5694 answers

bobbiker said

Why can't you prevent this? Seems like anyone who invents a browser like firefox can prevent it from being hacked like this. I see it's been going on for a long time and many people get it. https://akotajamestimothywhite.org/9811657533539/14e94770cbe43d93ba29601764895f80/3f244f7747e2621f1afa0b63a4ff1898.html Bummed in Seattle.

Why do we need police,   army,   airforce,   navy  etc.. ?
As long as there are humans on this planet,   there will be thugs,   unfortunately.
Trying to stay one step ahead of them:  not that easy   ......

''bobbiker [[#answer-927748|said]]'' <blockquote> Why can't you prevent this? Seems like anyone who invents a browser like firefox can prevent it from being hacked like this. I see it's been going on for a long time and many people get it. https://akotajamestimothywhite.org/9811657533539/14e94770cbe43d93ba29601764895f80/3f244f7747e2621f1afa0b63a4ff1898.html Bummed in Seattle. </blockquote> Why do we need police, &nbsp; army, &nbsp; airforce, &nbsp; navy &nbsp;etc.. ?<BR> As long as there are humans on this planet, &nbsp; there will be thugs, &nbsp; unfortunately.<BR> Trying to stay one step ahead of them: &nbsp;not that easy &nbsp; ......
DougUSA 0 solutions 1 answers

jscher2000 said

Hi sgross37, when you went back, what was the site from which this page loaded?

I have had this occur a few times and I know the last one was from Pandora. I believe the previous few times before this was from Pandora as well. I left it for some time, came back and the page was up with a download update pop-up ready for me to download.

The page that was on the screen was this: https://faewientresting.org/6091225517648/9d8a78b7bdf358f72f3e6e76ab016cc0/a897bf29d2c9eab9376010efdf26ebc4.html

''jscher2000 [[#answer-895584|said]]'' <blockquote> Hi sgross37, when you went back, what was the site from which this page loaded? </blockquote> I have had this occur a few times and I know the last one was from Pandora. I believe the previous few times before this was from Pandora as well. I left it for some time, came back and the page was up with a download update pop-up ready for me to download. The page that was on the screen was this: https://faewientresting.org/6091225517648/9d8a78b7bdf358f72f3e6e76ab016cc0/a897bf29d2c9eab9376010efdf26ebc4.html
tippywi 0 solutions 5 answers

I keep getting these popups as well. Just got another one while in my yahoo mail. https://aixeypoweredbysearch.net/517414680419/524bf9d125dcd4eb69f78dc45f5a2e13/6e39aa12dda583c92dfdee96fc0c0c26.html

I don't know if this will help but wanted to send it anyway.

I keep getting these popups as well. Just got another one while in my yahoo mail. https://aixeypoweredbysearch.net/517414680419/524bf9d125dcd4eb69f78dc45f5a2e13/6e39aa12dda583c92dfdee96fc0c0c26.html I don't know if this will help but wanted to send it anyway.

Modified by tippywi

scgal 0 solutions 5 answers

After a few months of these fake firefox updates, I finally got a fake update while using chrome. I guess it's something on my pc so I think I'll reformat and start over. Such a pain and really sad these people can vandalize personal property with no consequences.

After a few months of these fake firefox updates, I finally got a fake update while using chrome. I guess it's something on my pc so I think I'll reformat and start over. Such a pain and really sad these people can vandalize personal property with no consequences.
jscher2000
  • Top 10 Contributor
8577 solutions 70121 answers

Hi scgal, why do you think it's something on your PC? The malware distribution strategy is the same for both Firefox users and Chrome users.

Hi scgal, why do you think it's something on your PC? The malware distribution strategy is the same for both Firefox users and Chrome users.
James
  • Moderator
1593 solutions 11223 answers

scgal said

After a few months of these fake firefox updates, I finally got a fake update while using chrome. I guess it's something on my pc so I think I'll reformat and start over. Such a pain and really sad these people can vandalize personal property with no consequences.

This has not been determined to be due to malware on Windows.

Also yes the Chrome users on Windows have been getting hit with a fake urgent Chrome update Ad also often on the same disposable sites used for the fake urgent Firefox update Ad. One of many example threads that is ongoing. https://productforums.google.com/forum/#!topic/chrome/HcXgFFaO9WU

''scgal [[#answer-930132|said]]'' <blockquote> After a few months of these fake firefox updates, I finally got a fake update while using chrome. I guess it's something on my pc so I think I'll reformat and start over. Such a pain and really sad these people can vandalize personal property with no consequences. </blockquote> This has not been determined to be due to malware on Windows. Also yes the Chrome users on Windows have been getting hit with a fake urgent Chrome update Ad also often on the same disposable sites used for the fake urgent Firefox update Ad. One of many example threads that is ongoing. https://productforums.google.com/forum/#!topic/chrome/HcXgFFaO9WU

Modified by James

GSingleton 0 solutions 2 answers
Here is one of those sites for the urgent Firefox patch update https://ohdeymaxi-pedia.org/9231166810869/77e25b381e181ed8d34ce2767b174644/9e5e98d51a366b5591a6c5f575099b08.html
ElvenJediOfGallifrey 0 solutions 1 answers

I was on kohls.com, and I also was ambushed by the Evil Orange Fake Download Screen. It looked the same as the screenshots that other people have posted, and it opened a "What would you like to do with this file?" dialogue box, in which I promptly clicked "Cancel". The URL they were using this time was: https://nohkoterawarner.org/3281146277181/1479766387481496/firefox-patch.js

I was on kohls.com, and I also was ambushed by the Evil Orange Fake Download Screen. It looked the same as the screenshots that other people have posted, and it opened a "What would you like to do with this file?" dialogue box, in which I promptly clicked "Cancel". The URL they were using this time was: https://nohkoterawarner.org/3281146277181/1479766387481496/firefox-patch.js
John99 971 solutions 13138 answers

ElvenJediOfGallifrey Thanks for the posting

What version of Firefox are you using. Those links tend not to work for other users but the site itself is already getting blocked on my Firefox as a deceptive site

You should see something like this http://itisatrap.org/firefox/its-a-trap.html (If you have the feature turned off I guess the test site won't work to trigger a warning page either)

Have you turned off Firefox's security features

ElvenJediOfGallifrey Thanks for the posting What version of Firefox are you using. Those links tend not to work for other users but the site itself is already getting blocked on my Firefox as a deceptive site * [[How does built-in Phishing and Malware Protection work?]] You should see something like this http://itisatrap.org/firefox/its-a-trap.html (If you have the feature turned off I guess the test site won't work to trigger a warning page either) Have you turned off Firefox's security features
Gardiananj 0 solutions 5 answers

Yes I just got one. From ieshatipbet.org . I have Norton so I downloaded it and sent it to the trash bin. If you want it contact me and I will send it to you. Thanks Alan

Yes I just got one. From ieshatipbet.org . I have Norton so I downloaded it and sent it to the trash bin. If you want it contact me and I will send it to you. Thanks Alan
Gardiananj 0 solutions 5 answers
https://ieshatipbet.org/6892885746935/938bc4c21df4831bde95e5db8e9e113a/69a8b9efe18bd6460596df91bc0db02f.html
Gardiananj 0 solutions 5 answers
and https://ieshatipbet.org/6892885746935/1480178115807189/firefox-patch.js and http://ieshatiphat.org/68928857469351/938bc4c21df4831bde95e5db8... I get these when I rt click the addr. Does this help???
Gardiananj 0 solutions 5 answers

on pocket I get more of the addr. after the 5db8 I get e9/69a8b9efe18bd6460596df91bc0

on pocket I get more of the addr. after the 5db8 I get e9/69a8b9efe18bd6460596df91bc0
Rejoice380 0 solutions 7 answers
Orange screen from https://zayiwplacetel.org/1791181344296/1ba39346d89ed18911721d21a439668b/a8e08cf883b1fab16ba3e476f91c211c.html Redirect from http://finance.yahoo.com/ File not downloaded.
Rejoice380 0 solutions 7 answers
Once again, while simply scrolling through the http://finance.yahoo.com/ finance tab page: Pop-up at https://oophig-tools.com/9171202297766/24bdabc87a79eb8e4e2ece269007a229/598672eed64bc186af68a2c52cb65b73.html