Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

Here is a website hosting the firefox-patch.js malware file

  • 2 回覆
  • 1 有這個問題
  • 5 次檢視
  • 最近回覆由 James

Swim222
Swim222
more options

Here is a website (or maybe the only site) hosting the "firefox-patch.js" malware file. It is coming up through "adchoices" adverts but is coming up on many random webpages like Yahoo Mail, eBay and others. Here's the website...

https://uxeezdirecta.org/2021220068217/2c007c89cc3bee49145b5847049b955d.html

I wish you could "fix" firefox so that some malicious website can't try to automatically try to download files onto our PC's. We don't even have to click on anything on the webpage and a webpage comes up saying "Your FireFox needs to be updated." And we're asked to save and run the "firefox-patch.js" file. As far as I know this attack isn't possible with Chrome. Why can they exploit FireFox but not Chrome?

Here is a website (or maybe the only site) hosting the "firefox-patch.js" malware file. It is coming up through "adchoices" adverts but is coming up on many random webpages like Yahoo Mail, eBay and others. Here's the website... https://uxeezdirecta.org/2021220068217/2c007c89cc3bee49145b5847049b955d.html I wish you could "fix" firefox so that some malicious website can't try to automatically try to download files onto our PC's. We don't even have to click on anything on the webpage and a webpage comes up saying "Your FireFox needs to be updated." And we're asked to save and run the "firefox-patch.js" file. As far as I know this attack isn't possible with Chrome. Why can they exploit FireFox but not Chrome?

所有回覆 (2)

the-edmeister
the-edmeister
  • Moderator
more options

Yes, Chrome is affected by that potential exploit.

To block it in Firefox use the uBlock Origin extension. https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/

James
James
  • Top 25 Contributor
  • Moderator
more options

Swim222 said

As far as I know this attack isn't possible with Chrome. Why can they exploit FireFox but not Chrome?

The same group or persons is doing this to Google Chrome users on Windows also with the same sites being used but with a different background and files being served. One of many threads on this for Chrome is at https://productforums.google.com/forum/#!topic/chrome/HcXgFFaO9WU