X
Tap here to go to the mobile version of the site.

Support Forum

A scammer is taking over CNN.com's page, pretending to be a Firefox update, and I captured the URL this time.

Posted

The URL was:

https://eekiewanknews.net/8981613244252/efa132387dde53efa4fde122b6b57d7a.html

It used the Firefox logo on a similarly-colored background as you use. A popup also appeared. I stopped the browser, scanned for viruses and found none, and restarted and came here to report. Perhaps this will help you determine who is behind hacking Firefox.

Thank you again for all you do.

The URL was: https://eekiewanknews.net/8981613244252/efa132387dde53efa4fde122b6b57d7a.html It used the Firefox logo on a similarly-colored background as you use. A popup also appeared. I stopped the browser, scanned for viruses and found none, and restarted and came here to report. Perhaps this will help you determine who is behind hacking Firefox. Thank you again for all you do.

Additional System Details

Installed Plug-ins

  • Adobe PDF Plug-In For Firefox and Netscape 15.17.20050
  • Foxit Reader Plug-In For Firefox and Netscape
  • Intel web components for Intel® Identity Protection Technology
  • Intel web components updater - Installs and updates the Intel web components
  • NPWLPG
  • Shockwave Flash 22.0 r0
  • 5.1.41212.0

Application

  • Firefox 47.0.1
  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0
  • Support URL: https://support.mozilla.org/1/firefox/47.0.1/WINNT/en-US/

Extensions

  • Firefox Hello 1.4.2 (loop@mozilla.org)
  • Multi-process staged rollout 1.0 (e10srollout@mozilla.org)
  • Pocket 1.0.2 (firefox@getpocket.com)
  • Webroot Filtering Extension 1.2.0.54 (webrootsecure@webroot.com) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Intel(R) HD Graphics 4600
  • adapterDescription2:
  • adapterDeviceID: 0x0412
  • adapterDeviceID2:
  • adapterDrivers: igdumdim64 igd10iumd64 igd10iumd64 igdumdim32 igd10iumd32 igd10iumd32
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterSubsysID: 2af7103c
  • adapterSubsysID2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • direct2DEnabled: True
  • directWriteEnabled: True
  • directWriteVersion: 6.2.9200.17568
  • driverDate: 11-18-2014
  • driverDate2:
  • driverVersion: 10.18.14.4029
  • driverVersion2:
  • info: {u'AzureCanvasAccelerated': 0, u'AzureCanvasBackend': u'direct2d 1.1', u'AzureFallbackCanvasBackend': u'cairo', u'AzureContentBackend': u'direct2d 1.1'}
  • isGPU2Active: False
  • numAcceleratedWindows: 1
  • numTotalWindows: 1
  • supportsHardwareH264: Yes
  • webglRenderer: Google Inc. -- ANGLE (Intel(R) HD Graphics 4600 Direct3D11 vs_5_0 ps_5_0)
  • windowLayerManagerRemote: True
  • windowLayerManagerType: Direct3D 11

Modified Preferences

Misc

  • User JS: No
  • Accessibility: Yes
Moses
  • Moderator
459 solutions 3607 answers

Helpful Reply

Thanks for reporting a fake update. Please see the article I found a fake Firefox update.

Thanks for reporting a fake update. Please see the article [[I found a fake Firefox update]].
James
  • Moderator
1596 solutions 11250 answers

It sounds like you are getting a random named website claiming to have a urgent update. This is not from Mozilla or the Firefox web browser. The fake firefox-patch.exe and firefox-patch.js files can install things like trojans, viruses, or unwanted software on Windows based on past reports if the user runs them.

The updates are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux or by download from mozilla.org like say www.mozilla.org/firefox/all/

You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/

Unfortunately this has gone on for several weeks now with one or two new sites reported almost everyday. https://support.mozilla.org/en-US/forums/contributors/712056/ and https://support.mozilla.org/en-US/forums/contributors/712075

It sounds like you are getting a random named website claiming to have a urgent update. '''This is not from Mozilla or the Firefox web browser'''. The fake firefox-patch.exe and firefox-patch.js files can install things like trojans, viruses, or unwanted software on Windows based on past reports if the user runs them. The updates are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux or by download from mozilla.org like say www.mozilla.org/firefox/all/ You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/ Unfortunately this has gone on for several weeks now with one or two new sites reported almost everyday. https://support.mozilla.org/en-US/forums/contributors/712056/ and https://support.mozilla.org/en-US/forums/contributors/712075