1432560 - Malicious addon "FF AntiVir Monitoring" needs blocklisting

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Leetha]

Attachment: YP7G2ga.png

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0
Build ID: 20180122220231

Steps to reproduce:

(on a clean Firefox Nightly profile)
1. go to http://antivirmonitoringext.xyz/ff/
2. install the addon (the page is very misleading, see screenshot attached)



Actual results:

It is no longer possible to access about:addons



Expected results:

It should still be possible to access about:addons and remove the addon.

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

Found a few related IDs:

| 13594591 | {fce89242-66d3-4946-9ed0-e66078f172fc} |
| 13594618 | {0c4df994-4f4a-4646-ae5d-8936be8a4188} |
| 13622808 | {6cee30bc-a27c-43ea-ac72-302862db62b2} |
| 13672071 | {e08ebf0b-431d-4ed1-88bb-02e5db8b9443} |

Philipp, please review and push.

Comment 2

[Masatoshi Kimura [:emk]]

By the way, why is it possible for WebExtensions to prevent users from opening system pages such as about:addons in the first place?

Comment 3

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

Done. We're working on ways to make this impossible, but given tabs can be modified in various ways it is not trivial.