Closed Bug 629717 Opened 13 years ago Closed 13 years ago

Blocklist 'Browser Update' extension

Categories

(Toolkit :: Blocklist Policy Requests, defect)

defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: kbrosnan, Assigned: fligtar)

References

Details

Attachments

(1 file)

This is an extension that a user on irc reported seeing at http://www.new-firefox.com From a quick look at the code it seems to screw with the user agent, replace Google ads and display popups. From what I can tell there are no beneficial aspects to this extension.

Going to check this on a VM in a bit.
Attached file Extension in question
Will investigate.
Assignee: nobody → fligtar
I've looked at the source and played around with the add-on in a VM. As far as I can tell it:

* Sends every page URL you visit to a remote server
* Shows banner ads in Google search results
* Shows ads on your Facebook wall that look exactly like wall posts with a Facebook application authorization request (it's just a single image ad) -- would post screenshot but it has an inappropriate picture.

Given that it provides no value and is only adware/spyware, and that it is obtained from new-firefox.com with the likelyhood of making users think they're getting a Firefox update, I recommend we block it.

Does anyone disagree?

GUID is support@update-firefox.com
Block +
Totally agree, let's hardblock it. Additionally, new-firefox.com and update-firefox.com redirect to scammy sites / parked pages so I don't think it would be worth it trying to reach out.
(In reply to comment #5)
> Totally agree, let's hardblock it. Additionally, new-firefox.com and
> update-firefox.com redirect to scammy sites / parked pages so I don't think it
> would be worth it trying to reach out.

You want to notify Legal though so they can claim these domains for trademark violation.
legal is aware on a separate bug.
Depends on: 629808
Tested the XML below on staging and the block is ready to go as soon as bug 629808 updates mozilla.com.

<emItem id="support@update-firefox.com"/>
After the blocking is done, it'd be convenient to also post a blog for general awareness to stay away from installing suspicious extensions/plugins. These blocked ones can also be mentioned as example with BIG RED NOTICE : "MALWARE, DON'T INSTALL". :P
In addition to new-firefox.com and update-firefox.com, a quick search on domain registrations shows other domains registered at the same time:
http://www.domaincom.org/view/90237.html

new-browser.com (also serves a firefox addon)
new-chrome.com (redirects to new-browser.com)
new-explorer.com
new-safari-update.com

as well as http://daily.domain-names-registered.com/2010-12-17-p99.html

www.update-explorer.com
www.update-chrome.com
www.update-safari.com
The add-on has been hard-blocked.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
hi i hate to be a pain but how do you get rid of this bug for my dad didnt realise it was a fake and clicked on it. i have deleted all downloads and checked add-ons but cant find it anywhere please help
This extension is already blocked and you have a different issue and it's not related to this one.
Please use http://support.mozilla.com if you need help.
This is an extension that a user on irc reported seeing at http://www.bramjtech.com From a quick look at the code it seems to screw with the user agent, replace Google ads and display popups. From what I can tell there are no beneficial aspects to this extension.

Going to check this on a VM in a bit.
Product: addons.mozilla.org → Toolkit
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: