Closed Bug 1534828 Opened 6 years ago Closed 6 years ago

Extension Block Request: web-private@ext.com

Categories

(Toolkit :: Blocklist Policy Requests, task)

Product:
Toolkit
Component:
Blocklist Policy Requests
Type:
task
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: zitrobugs, Assigned: TheOne)

Details
Extension name web-private@ext.com
Extension versions affected <all versions>
Platforms affected <all platforms>
Block severity hard

Reason

remote code injection. redirect google-search and bing-search on other sites like searchnewworld.com

Extension GUIDs

web-private@ext.com

Additional Information

Name: Flash Player
Version 1.2

Site hxxps://anygoldbest-theclicks.icu/... force to fullscreen-mode and force to install extension

hxxp://webprivate-search.co/ext/web_private-1.2-fx.xpi

Can you provide the exact page with the installation? Where did you get this add-on?
The page "https://anygoldbest-theclicks.icu/" is not correct.

Flags: needinfo?(zitrobugs)

try this one h**p://anygoldbest-theclicks.icu/pDlZn8nRyH_y4tZVlEBalnW3Va33K1BNvAMxLBJNCsI?

Flags: needinfo?(zitrobugs)

The site encourages installation, but does the additive have bad behavior?

Flags: needinfo?(zitrobugs)

I already wrote it in my "reason". Please see above.

Flags: needinfo?(zitrobugs)

link: "http://anygoldbest-theclicks.icu/pDlZn8nRyH_y4tZVlEBalnW3Va33K1BNvAMxLBJNCsI" is not working. "Connection failure" after try install addon.

Flags: needinfo?(zitrobugs)
Flags: needinfo?(zitrobugs)

Blocklist reasons:

  • Disguising as Flash Player
  • Search hijacking
Assignee: nobody → awagner
Status: NEW → ASSIGNED

The block has been staged. Philipp, can you please review and push?

Flags: needinfo?(philipp)

Done

Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Flags: needinfo?(philipp)
Resolution: --- → FIXED
Type: enhancement → task
You need to log in before you can comment on or make changes to this bug.