update came from https://kaighbsuir.org/77127745703085/6f15315c67506b25d9e46082d03d7da1/dc338f6c13695e80087adf02322bb032.html
I got an update yesterday from a suspicious source. did not look at the URL (stupid) until after the download
Chosen solution
Too bad that you spotted the scam too late ..... To undo any harm that may have been done, would you please take a look at this article :
Troubleshoot Firefox issues caused by malware Please make sure that you run all scans, for what one doesn't pick up, the other one will.
Also see : I found a fake Firefox update
Read this answer in context 👍 1All Replies (6)
Chosen Solution
Too bad that you spotted the scam too late ..... To undo any harm that may have been done, would you please take a look at this article :
Troubleshoot Firefox issues caused by malware Please make sure that you run all scans, for what one doesn't pick up, the other one will.
Also see : I found a fake Firefox update
Not sure if any harm was done, running all of my mal/spy/ virus ware (it was time anyway) and running my fall backups. Always remember to check URL, this came up as a regular ... you need to update.
PixieJ said
Not sure if any harm was done, running all of my mal/spy/ virus ware (it was time anyway) and running my fall backups. Always remember to check URL, this came up as a regular ... you need to update.
No, I don't think any harm was done, but running the malware scans : just in case - and, like you said, it was time anyway (just a precaution, eh ?)
From now you will be extra on the alert, won't you ? Firefox will always update from within the browser and not from a random webpage. Scammers have been using this tactic, trying to get users to download and infect their computer. Hard to get rid off, as they will change their URL on a daily basis. You could consider an ad-blocking add-on like :
https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/?src=ss
That is what "fooled me" it was not a web page, it popped up as a page on my browser, as I was looking at a news site, it did not seem suspicious, until after I clicked "update" and noticed the URL was not Mozilla but the other.
PixieJ said
That is what "fooled me" it was not a web page, it popped up as a page on my browser, as I was looking at a news site, it did not seem suspicious, until after I clicked "update" and noticed the URL was not Mozilla but the other.
You're not the first who was fooled this way, and you will not be the last; these scammers are sly foxes, who need to get their behind kicked.
Well, uBlock Origin might keep them away .......
Based on research from many months ago, the "patch" download -- .js file -- installs malware directly into the Windows Registry, which was not detected/cleaned by very many scanners at that time. Malwarebytes Anti-Malware has a good reputation for being able to clean it out.