Firefox Support Forum

Following site is immediately hijacked to a scam site asking for login apparently to access private info. It happens with Firefox (only) whenever security setups are set "not to track", "not to prompt for passwords", "not to prompt for credit cards" "no history" "reset of cookies at logout" etc.. then the site below: http://thaimassage-herborn.de/ is redirected to SCAM SITE: https://xb7.serverdomain.org/admin/index.php appearing as "Adminpanel" asking for Login etc..

At the same time following site is partially blocked on the news banner pictures, with a white sheet over them, whenever down scroll is hit. https://www.tgrthaber.com.tr/

Only by resetting firefox deals with the issues. But ofcourse with the reason, above security settings removed.

Virusscanner was not able to detect this hijacking or the reason behind.

Is this a firefox software issue? Is there a way to resolve this? Thank you already for any support or suggestions to resolve.

My computer was totally locked, even after I did hard reboot. Message on screen said to call "Microsoft" to unlock. It was not MS, but a company that "represented" MS. I don't know how they did gained access or if they are legitimate or scammers. Name of company is "Instantlivehelps" or Supreme Store. They wanted $350 to unlock the computer, which I have not yet paid. I have firefox, windows 10, and Norton 360 with lifelock and a secure VPN. Is there anything about Firefox that could have helped prevent this and if so, what can I do? I run a store off, so I have to be accessible. Also, I am very much a novice at this. Thanks.

Hackers will be very happy now that Firefox automatically download their malware and backdoors. Thanks to Firefox, hackers will be able to infect millions of world computers and install ransomware and make havoc i financial, health, and other industries. Firefox will forever be praised by cybercriminals of the world.

im afraid to download anything. i should not have to download firefox browser, i have been using this acct for years. i tried to update ccleaner last nite and windows defender caught a trojan but removed it right away all other places i have been were fine today what happened to my firefox and duckduck go etc

Is it possible to password protect one specific tab?

I have a tab with my gmail open, and I use google to login to other sites, so it is sensitive. Some months ago my computer was remotely hacked and someone could get into my mail through firefox when I was not using it. I would prefer not having to log out every other minute and keep receiving email notifications, but make it impossible for someone to open that tab and poke around.

Note: I use Malwarebytes Premium since then, so maybe this is no longer necessary.

I can't find anything about a compromised Firefox update while using the browser when you go to help and let the browser update itself. It seems you've been hacked because I can't otherwise explain the firefox background update 308046BoAF4A39CB, which is been detected by my systems. I obviously have more information about this if you like, but I see nowhere how to report this properly. This is the first time this has happened to me, at least as far as I know and so far I've only detected the Tr.Gen threat on my Windows computers. I would like an adequate response from Mozilla on how this could happen and what the repercussions are plus how to avoid this in the future. I've been using the Firefox browser on all my systems with various operating systems and would prefer to keep using it, but not if your own updating process is comprimised. I also think it's idiotic that I can't upload a bigger screenshot than 1024 kb because my very relevant picture is 3084 kb in size.

Sincerely,

J.L

Co-browsing with Firefox is the best way to escape hacker's dangling hammer. Sometimes they slow down my connection to the Internet just to get at their target. Please help to stop them. I am afraid they may have configured my device to suit their desire since they access my account at will. Repeated access into my account despite my efforts to stop it.

I have had my passwords on lockwise for several years then when it stopped it went back to firefox browser. I was hacked last part of Dec 2021 and browser had all my passwords and stuff in it. All my passwords were removed I see now that I have been able to get back in it. Were the transferred to another ID? I know that the hackers got all my updated pwords. I was able to one by one get back into several accts and gain control of my login... now I have to figure out where all my stuff went. Please, help. Where do I go from here? Can you identify where all my stuff went and by whom?

Hi, My repaired computer came back today. Under https://accounts.firefox.com/settings/ Connected Services I found an entry <Firefox Mobile 95, Android 10> that signed into my account while the machine was under repair at the Lenovo repair centre. Not trusting it I immediately removed that account. Now I realize that that intruder might have had access to my passwords in Firefox (the machine was completely dead, so no precautions were possible). And therefore to have proof in the future of illegal access I should have made a screendump of the accounts overview. My question: is there a way to retrieve the history of old, but deleted, connected services to my Firefox account? Thx in advance! Ruurd

Someone has logged into my new laptop's Firefox, I've changed my password but they keep logging into my accounts... paypal, amazon, credit cards. Please help me. They've charged almost $500 already

I use firefox and pay for the vpn from firefox. Last week I encountered a ransomware attack. The Firefox immediately quarantined the attack. I am having no issues with using the computer. What was affected is Firefox itself. I cannot open Firefox at this point. I get permission denied messages upon launch. I have tried reinstalling a number of times in both the standard login and administrative login environments but I get the same results in both. Where do I go from here? Thanks Pat Imbriglio ...

I fear my computer was and still is Breeched.I tried to email you for support, but it bounced back! ’Sylvia Sussman( ... @mac.com)

On Dec 3, 2021, at 3:54 PM, Sylvia Sussman <... @icloud.com> wrote:

Regarding my previous email , just sent to you today: Below is the EmaiI I received from you after my computer was breeched! I Had not signed in to Firefox accounts, but someone in Emeryville CA HAD!. The email you refer to, presumably asking for a firefox account, was NOT sent from my computer in Berkeley, CA, but from a computer in Emeryville CA pretending to being on my computer, which was then, and remains, in Berkeley ,CA. However you responded by offering that individual an account with you, on MY computer--I received tnhe correspondance between you and the breecher ofmy computer. I]Ts happened in April and I have only just figured out what had happened. I fear this individual now has access to my computor. Below is a quote of the response you sent to him/her in Emeryville CA

"Below is the EmaiI I received from you after my computer was breeched! I Had not signed in to Firefox accounts, but someone in Emeryville HAD!. The email you refer to, presumably asking for a firefox account, was NOT sent from my computer in Berkeley, CA, but from a computer in Emeryville CA pretending to being on my computer, which was then, and remains, in Berkeley ,CA. Sylvia Sussman ... @mac.com

On Apr 28, 2020, at 5:01 PM, Firefox Accounts <accounts@firefox.com> wrote:

Welcome to the Firefox family

You're signed in and ready to start exploring safely and securely.

Now get the most of Firefox by signing in everywhere you browse.

Connect another device This is an automated email; if you received it in error, no action is required. For more information, please visit Mozilla Support.

Mozilla. 331 E Evelyn Ave, Mountain View, CA 94041 Mozilla Privacy Policy Firefox Cloud Terms of Servicebold text Sylvia Sussman ... @mac.com

Hi Folks,

I've used Firefox for years with no problem. Yesterday, I was seeking out a specific font. The website looked legit, but then a security block happened and I don't recall if it was Firefox security or Acronis that flashed a brief "block" announcement. In any case, from that point on, several "racey" websites popped up every time I loaded Firefox. This happened even after I restarted my computer. I then checked to see if I had pop-ups blocked on the Firefox options. I didn't, so I checked the box against pop-ups. But what happens now is Firefox does an attempt to load TWICE with an odd jerk-flash movement. Only one Firefox browser window comes up -- and that's good -- but SOMETHING is still trying to make those "racey" websites load. Why? How?

All of that to say that I'm concerned about security. Should I uninstall Firefox and reinstall?

Thanks for your input! Bob Anderson

Last night my Firefox 94.0.2 was hacked. When running Firefox, it would lock up my desktop. It disabled Norton Security, it disable other installed security software, and it disabled Windows System Restore. The hacker put up a message claiming to be Microsoft Support, with a phone number to call for help. This was a scam. I ran Firefox refresh, and that removed the hacker's program from Firefox, but then I had to do a full repair of my Window's installation. To protect my system, and prevent this from happening again, I added "xpinstall.enabled = false" into about.config. Please let me know if this will prevent a web site from installing a dangerous hack into Firefox, or if there is something else that I need to do. I have used Firefox for years, and have never encountered this problem before. Firefox is my favorite browser, but I am now afraid to use it. Please advise me what to do. Thanks, Jim

My Premium Malwarebytes has detected a Trojan on outbound, I usually Play Runescape, Have been playing for 15 Years +, 2 hours before this, i played on Runescape with no problems, since opening Runescape Launcher, game did not load, had reference also to firewall, since 2 hours prior Nothing had changed. i then rechecked firewall, and all was OK, I had added all URL from Runescape to exception, even company name, jagex.com I also use Norton 360, however Norton did not pick up Trojan, any suggestions? I was thinking of uninstalling Firefox, then installing again, I didn't do this as i have many Sites saved and wasn't sure if they would also be deleted, I play this game to keep my mind active, as i can't walk sit or stand for more then a couple minutes, ...

Below are details of Trojan: Cheers Ralph:

Log Details- Protection Event Date: 11/28/21 Protection Event Time: 9:40 PM Log File: 954b6ada-5037-11ec-bdb7-80fa5b790f8f.json

-Software Information- Version: 4.4.11.149 Components Version: 1.0.1513 Update Package Version: 1.0.47808 License: Premium

-System Information- OS: Windows 10 (Build 19042.1348) CPU: x64 File System: NTFS User: System

-Blocked Website Details- Malicious Website: 1 , C:\Program Files\Mozilla Firefox\firefox.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data- Category: Trojan Domain: classicmoto.rs IP Address: 45.147.54.18 Port: 443 Type: Outbound File: C:\Program Files\Mozilla Firefox\firefox.exe

Long story short: Whenever I open Firefox, apparently a Russian search engine named 'Poshukach' hijacks my homepage and doesn't let me use google(Image attached). Now to solve this I scoured the Internet. I refreshed Firefox, ran malware scans and even re-installed windows. Still it doesn't go away. I installed Firefox in another device with the same account but to no avail. They while roaming through Firefox settings I noticed in the top that it says 'Your browser settings is managed by your organization' or something like that. So, I figured bad guys took control of my browser's settings disguising as my so called "organization" So, I need help from Firefox's end to solve this. Remove this Organization management stuff from my account. I want my control back. Otherwise, I am afraid I gotta stop using Firefox altogether due to privacy reasons

good day. two days ago I was infected by poshukach probably when downloading Opera browser or a torrente file. So, whenever I initiate firefox I am redirected to poshukach browser instead. Question is: how can I get rid of poshukach? Thanks a lot

Malwarebytes Prem. Reported malware on one of your files.

Website Blocked due to malware

IP 138.68.50.216 Port 443 Type Out bound File c:\program file\Mozilla Fire Fox Firefox.exe

Should I ignore it?