Blocklist 'Browser Update' extension

RESOLVED FIXED

Status

()

Toolkit
Blocklisting
--
critical
RESOLVED FIXED
7 years ago
2 years ago

People

(Reporter: Kevin Brosnan, Assigned: fligtar)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

18.96 KB, application/octet-stream
Details
(Reporter)

Description

7 years ago
This is an extension that a user on irc reported seeing at http://www.new-firefox.com From a quick look at the code it seems to screw with the user agent, replace Google ads and display popups. From what I can tell there are no beneficial aspects to this extension.

Going to check this on a VM in a bit.
(Reporter)

Comment 1

7 years ago
Created attachment 507897 [details]
Extension in question
(Assignee)

Comment 2

7 years ago
Will investigate.
Assignee: nobody → fligtar
(Assignee)

Comment 3

7 years ago
I've looked at the source and played around with the add-on in a VM. As far as I can tell it:

* Sends every page URL you visit to a remote server
* Shows banner ads in Google search results
* Shows ads on your Facebook wall that look exactly like wall posts with a Facebook application authorization request (it's just a single image ad) -- would post screenshot but it has an inappropriate picture.

Given that it provides no value and is only adware/spyware, and that it is obtained from new-firefox.com with the likelyhood of making users think they're getting a Firefox update, I recommend we block it.

Does anyone disagree?

GUID is support@update-firefox.com

Comment 4

7 years ago
Block +

Comment 5

7 years ago
Totally agree, let's hardblock it. Additionally, new-firefox.com and update-firefox.com redirect to scammy sites / parked pages so I don't think it would be worth it trying to reach out.
(In reply to comment #5)
> Totally agree, let's hardblock it. Additionally, new-firefox.com and
> update-firefox.com redirect to scammy sites / parked pages so I don't think it
> would be worth it trying to reach out.

You want to notify Legal though so they can claim these domains for trademark violation.

Comment 7

7 years ago
legal is aware on a separate bug.
(Assignee)

Updated

7 years ago
Depends on: 629808
(Assignee)

Comment 8

7 years ago
Tested the XML below on staging and the block is ready to go as soon as bug 629808 updates mozilla.com.

<emItem id="support@update-firefox.com"/>
After the blocking is done, it'd be convenient to also post a blog for general awareness to stay away from installing suspicious extensions/plugins. These blocked ones can also be mentioned as example with BIG RED NOTICE : "MALWARE, DON'T INSTALL". :P

Comment 10

7 years ago
In addition to new-firefox.com and update-firefox.com, a quick search on domain registrations shows other domains registered at the same time:
http://www.domaincom.org/view/90237.html

new-browser.com (also serves a firefox addon)
new-chrome.com (redirects to new-browser.com)
new-explorer.com
new-safari-update.com

as well as http://daily.domain-names-registered.com/2010-12-17-p99.html

www.update-explorer.com
www.update-chrome.com
www.update-safari.com
(Assignee)

Comment 11

7 years ago
The add-on has been hard-blocked.
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → FIXED

Comment 12

6 years ago
hi i hate to be a pain but how do you get rid of this bug for my dad didnt realise it was a fake and clicked on it. i have deleted all downloads and checked add-ons but cant find it anywhere please help
This extension is already blocked and you have a different issue and it's not related to this one.
Please use http://support.mozilla.com if you need help.

Comment 14

2 years ago
This is an extension that a user on irc reported seeing at http://www.bramjtech.com From a quick look at the code it seems to screw with the user agent, replace Google ads and display popups. From what I can tell there are no beneficial aspects to this extension.

Going to check this on a VM in a bit.
Product: addons.mozilla.org → Toolkit
You need to log in before you can comment on or make changes to this bug.