Almost got tricked by a fake captcha
Does Firefox "remember" any browser data from another Windows user account? I created a guest account for someone today and while I was browsing, I got redirected to a site called fy3 dot fit which had the fake captcha. I did not open the run box and did not paste any commands from it, so is the guest account compromised or do I need to nuke Windows and start again? I read on reddit that it's an infostealer but if Firefox does not remember the other user account's browser data, does that mean nothing would be stolen if I did run it?
Valgt løsning
I'm only aware of infostealers that execute outside the browser and exfiltrate files. I'm not aware of any infostealers that run from a web page, since content scripts should be restricted to same-site or same-tab data.
Les dette svaret i sammenhengen 👍 0All Replies (4)
Being redirected from one URL to another does not indicate that Firefox downloaded (much less installed) malware. You should run malware scans as you normally would just in case.
Hi, I already ran Malwarebytes and Win Defender as soon as I closed the fake captcha site. Nothing was detected. I'm not worried about malware being downloaded but only if the Firefox browser data from the main windows user account could be stolen by running an infostealer on the guest account. The guest account had Vanilla Firefox with zero extensions and seemingly no accounts on it as seen by Google defaulting to light mode. I want to believe nothing's wrong but I can't be too sure. I apologize if I seem like I'm overreacting, I just had too many coincidences today that I just had to ask.
Valgt løsning
I'm only aware of infostealers that execute outside the browser and exfiltrate files. I'm not aware of any infostealers that run from a web page, since content scripts should be restricted to same-site or same-tab data.
If that's the case, then I'll assume I'm fine. However I didn't take any chances and backed up my files and nuked the installation. Thanks for assisting, maybe I'm just overly worried even though I didn't run the script. Nothing else comes up on google too when I search fy3 dot fit. Anyway, I'll mark this as solved, thanks.