1539910 - Extension Block Request: adobe-flash-player-free-

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, task)

Description

[Sylvain Giroux [:Spoji]]

Extension name	adobe-flash-player-free-
Extension versions affected	<all versions>
Platforms affected	<all platforms>
Block severity	hard

Reason

Code is a keylogger.

Extension GUIDs

Extension can be found at 

https://reviewers.addons.mozilla.org/en-US/reviewers/review/adobe-flash-player-free-

Additional Information

Code is quite similar to another extension that jorgev dealt with earlier this week at
https://reviewers.addons.mozilla.org/en-US/reviewers/review/adobe-flash-player-browser-ado

By digging a bit further, it would seem the codebase comes from hxxps://github.com/hakanonymos , which include tools for coinhive and keyloggers on Chrome and Firefox.

Comment 1

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

The block has been staged. Andreas, can you review and push?

Comment 2

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

Extension GUIDs

{058769c7-784e-47a9-a2c4-dfd81bbf6c8c}
{2a58598a-f951-4fb0-af2b-12fb7482bf33}

Comment 3

[[e-mail]]

Approved and pushed

Comment 4

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

Adding these:

{00f77164-eca9-4353-916d-8ea493a54c8d}
{0716b2a5-8181-45b8-b675-915e38903761}
{26124967-7e32-4577-b998-7296c68d3eb9}
{273052bc-fc67-4fc1-a6fd-e62acc3ddad1}
{4b5f53ac-36ac-4018-80cb-f1106f60ef96}
{61065f61-51aa-462c-aca0-f1addbfa202b}
{63383006-d617-4a00-9ca7-30a6864782ee}
{7629c987-59ea-4e2f-bcde-b55646ecd268}
{78e8c8fa-32ce-432b-9a40-b615bff7cd96}
{8e9c05df-e0f5-479f-abb9-858650cb471e}
{947f1ac0-09f2-4016-a345-dad0d2ee8f57}
{9b9f8124-47bc-4699-8557-45573995b0af}
{ab159932-d1dd-4d16-9332-8302a01e0ced}
{b7340504-f6ba-43cb-8bd6-5ead88d29898}
{b7340504-f6ba-43cb-8bd6-5ead88d29898} 	
{bcb9265f-20fd-4311-a33f-212c2d08043a}
{f8701822-2814-4d5d-af01-cf7fde4fd510}

Comment 5

[Philipp Kewisch [:Fallen] [:📆][:🧩]]

The block has been staged. Andreas, can you review and push?

Comment 6

[Jorge Villalobos [:jorgev] (he/him)]

Looks like these were pushed during the weekend ¯_(ツ)_/¯