Page 1 of 1 [ 3 posts ] 

leejosepho
Veteran
Veteran

User avatar

Joined: 14 Sep 2009
Gender: Male
Posts: 9,011
Location: 200 miles south of Little Rock

17 Sep 2017, 9:56 am

This does not always happen every day, but something needs to be done to stop it altogether when someone clicks a WP link and the entire web page is hijacked and re-directed to a fake Firefox update:

Image


Image


firefox-patch.js - Google

note to all Firefox users: Firefox *never* sends updates in this kind of way, so be certain to *never* click them!


_________________
I began looking for someone like me when I was five ...
My search ended at 59 ... right here on WrongPlanet.
==================================


Ichinin
Veteran
Veteran

User avatar

Joined: 3 Apr 2009
Gender: Male
Posts: 3,653
Location: A cold place with lots of blondes.

18 Sep 2017, 3:58 am

https://www.google.com/search?q=firefox+scriptblocker


_________________
"It is far better to grasp the Universe as it really is than to persist in delusion, however satisfying and reassuring" (Carl Sagan)


kitesandtrainsandcats
Veteran
Veteran

User avatar

Joined: 6 May 2016
Age: 60
Gender: Male
Posts: 3,965
Location: Missouri

18 Sep 2017, 5:15 am

Quote:
To our knowledge those notices are a form of "malvertising": those fake notices get triggered by code contained in ads that are displayed on otherwise legitimate websites you are visiting and get spread through advertisement networks. This is an example how such a fake update notice may look like - they are hosted on randomly generated and quickly changing domains:


https://support.mozilla.org/en-US/kb/i-found-fake-firefox-update

Quote:
What you can do if you spot a fake update notice?
Always click Cancel on these pop-ups. Never save and open/run unsolicited files!
Install an ad-blocking addon from addons.mozilla.org to avoid such kind of malvertising in the future.
Report web forgeries to the Google Web Forgery site.


And from August 30th, 2016

Quote:
This particular fake Firefox patch malware scam is targeting Firefox users on Windows and has been going on for over three months now. No point blocking one of these sites since they are basically disposable sites in being used for a day. Not everybody gets this but once people get it they seem to have a good chance of getting it again.

People say using a adblocking extensions like ublock origin or Adblock can help block these ads.

No worry about the link since only the original person was able to view it which makes it harder for Mozilla and others to narrow things down to deal with the malicious Ads.

This more recent fake update scam was initially with a firefpx-patch.exe but they kept making new ones perhaps because it was getting blocked or flagged in different ways so they switched to the firefox-patch.js since July 11.

These guys are even targeting Chrome users on Windows with fake updates also. I say same person or group because they are using the same disposable sites reportedly used for the fake urgent Firefox updates

http://forums.mozillazine.org/viewtopic.php?f=7&t=3021461

Found this too, http://www.myantispyware.com/2017/04/24/how-to-remove-firefox-patch-js-malware-pop-up-virus-removal/
Quote:
April 24, 2017
Have you become that your Mozilla Firefox web browser randomly displays unwanted popups asking install Firefox-patch.js? It is a sign that you have an installed adware (also known as ‘ad-supported’ software) on your PC system. The adware is a part of dangerous software that created to display a ton of unwanted pop-up ads. Perform the steps below ASAP. It will clear your machine from ad supported software that generates a huge number of popup ads in the web-browser and thereby remove the redirect to Firefox-patch.js page.


_________________
"There are a thousand things that can happen when you go light a rocket engine, and only one of them is good."
Tom Mueller of SpaceX, in Air and Space, Jan. 2011