Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Sykje yn Support

Mij stipescams. Wy sille jo nea freegje in telefoannûmer te beljen, der in sms nei ta te stjoeren of persoanlike gegevens te dielen. Meld fertochte aktiviteit mei de opsje ‘Misbrûk melde’.

Learn More

Dizze konversaasje is argivearre. Stel in nije fraach as jo help nedich hawwe.

I think my sync account was hacked?

  • 2 antwurd
  • 1 hat dit probleem
  • 6 werjeftes
  • Lêste antwurd fan kodermike

kodermike
kodermike
more options

I switch browsers often, so I don't run firefox every day to know when this might have happened. Launched firefox today for the first time in a few weeks and noticed one of my bookmark folders was in russian - text translated to "haunted." I had a unique password on my sync account, but at the same time I'm pretty sure I didn't suddenly develop (and then forget) russian. Any other reports?

I switch browsers often, so I don't run firefox every day to know when this might have happened. Launched firefox today for the first time in a few weeks and noticed one of my bookmark folders was in russian - text translated to "haunted." I had a unique password on my sync account, but at the same time I'm pretty sure I didn't suddenly develop (and then forget) russian. Any other reports?

Alle antwurden (2)

FredMcD
FredMcD
more options

If you think any account has been hacked, change the password Imminently. In the case of Firefox sync, changing the password will remove all data.

kodermike
kodermike Fraacheigener
more options

FredMcD said

If you think any account has been hacked, change the password Imminently. In the case of Firefox sync, changing the password will remove all data.

Well, yeah. My real concern is that given this was a password only used for firefox sync, that the service itself was compromised. Browser and password history shows most of the activity was on March 20, with updates as recently as April 25.