X
Tap here to go to the mobile version of the site.

Support Forum

Site might add malware disguised as a Firefox Add-on: intuitTax2020.com

Posted

After I clicked on "Accept", it did NOT offer the option to proceed to "intuitTax2020.com" without adding the Add-on, as promised. I also could not find a "Safety Search" Add-on in the Firefox "about: addons" page. (I have never heard of the "Firefox Store".)

After I clicked on "Accept", it did NOT offer the option to proceed to "intuitTax2020.com" without adding the Add-on, as promised. I also could not find a "Safety Search" Add-on in the Firefox "about: addons" page. (I have never heard of the "Firefox Store".)
Attached screenshots
Quote

Additional System Details

Application

  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0

More Information

evhenry
  • Top 25 Contributor
  • Administrator
33 solutions 190 answers

You are correct, this is not their website, it's something shady. The correct weburl is https://turbotax.intuit.com

As for it referencing "Firefox store" it looks like it simply pulls the browser you're on and populates the "[browser] store" based off that. If I navigate to that site in Chrome it says "Chrome store"

You are correct, this is not their website, it's something shady. The correct weburl is https://turbotax.intuit.com As for it referencing "Firefox store" it looks like it simply pulls the browser you're on and populates the "[browser] store" based off that. If I navigate to that site in Chrome it says "Chrome store"
Was this helpful to you?
Quote
James
  • Top 25 Contributor
  • Moderator
1603 solutions 11348 answers

Hmm if I try that 2020 site in SeaMonkey it tries to claim I need to update Flash Player (have current version) and wants me to allow install.

The "Safety Search" sounds like one of the many "Safe" extensions that was blocked over the years due to being malware. https://blocked.cdn.mozilla.net/

Hmm if I try that 2020 site in SeaMonkey it tries to claim I need to update Flash Player (have current version) and wants me to allow install. The "Safety Search" sounds like one of the many "Safe" extensions that was blocked over the years due to being malware. https://blocked.cdn.mozilla.net/

Modified by James

Was this helpful to you?
Quote
evhenry
  • Top 25 Contributor
  • Administrator
33 solutions 190 answers

It's a scammy-looking site. I'd avoid navigating there in case it's trying to install stuff to your computer without your permission.

It's a scammy-looking site. I'd avoid navigating there in case it's trying to install stuff to your computer without your permission.
Was this helpful to you?
Quote
James
  • Top 25 Contributor
  • Moderator
1603 solutions 11348 answers

I use Linux so the risk is less compared to Windows.

It did not actually install anything as it gave a prompt under the location to allow install while having a blurry image in centre claiming I need to update Flash.

Hmm it seems like it is domain parked now , at least for me.

I use Linux so the risk is less compared to Windows. It did not actually install anything as it gave a prompt under the location to allow install while having a blurry image in centre claiming I need to update Flash. Hmm it seems like it is domain parked now , at least for me.

Modified by James

Was this helpful to you?
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.