did you issue a patch called eewoochelsea-fc.org?
For past week while on CNN and FOX news sites a "firefox" page suddenly appears saying "urgent update" and a box with link to firefox-patch.exe. In the browser the address is https://eewoochelsea-fc.org (see rest of address in photo). I didn't close the browser immediately this time and got a red warning box from microsoft security essentials. So I closed it all out and ran a scan. I'm assuming this is a fake firefox page/patch? Anyone know who it's from? Just happens on those two sites. I use a PC with windows 7. Firefox 47.0 Thanks.
Chosen solution
No it is not legit. Does it make sense for Mozilla to host a update or download from a url that does not have Mozilla or Firefox in url.
The fake patch/update exe can install things like trojans, viruses or unwanted software based on past reports.
The desktop Firefox is not just for Windows as it is for Mac OSX and Linux also so .exe would not be an effective way to send out Firefox updates. The updates are done internally in Firefox (with a .mar type of file) or by download from mozilla.org like say www.mozilla.org/firefox/all/
Even if Mozilla were to use .exe for Firefox updates on Windows, they would be serving them from a *.mozilla.org url and not from random websites with weird names.
Read this answer in context 👍 1All Replies (4)
Chosen Solution
No it is not legit. Does it make sense for Mozilla to host a update or download from a url that does not have Mozilla or Firefox in url.
The fake patch/update exe can install things like trojans, viruses or unwanted software based on past reports.
The desktop Firefox is not just for Windows as it is for Mac OSX and Linux also so .exe would not be an effective way to send out Firefox updates. The updates are done internally in Firefox (with a .mar type of file) or by download from mozilla.org like say www.mozilla.org/firefox/all/
Even if Mozilla were to use .exe for Firefox updates on Windows, they would be serving them from a *.mozilla.org url and not from random websites with weird names.
Yes it is a fake, and presumably malware. It certainly should not use Firefox logos.
We (Mozilla Firefox) are trying to get hold of copies of this update file. I am not sure anyone has succeeded yet.
If you or anyone else sees this again please record the link / url and if you can download and save the file (Do NOT run or open the file it could be dangerous.) We now have one copy of the file but it may well change in the future so it may help if we know peeople have copies we can check.
The site you mention https://eewoochelsea-fc.org does not seem reachable now. Anyone needing to upgrade or check their Firefox version see this article:
Note Firefox is currently Fx 45.0 but if you check you may get a genuine update to Fx47.0.1
I will look at the CNN & FOX news channel with a Windows machine & see if I can see this issue.
You may be well advised to do malware scans. Unless sites like CNN are serving this crap to everyone you could have malware on your computer.
This thread mentions actions you may take to report this issue
attaching image that shows url. No, I didn't download it.
John99 said
We (Mozilla Firefox) are trying to get hold of copies of this update file. I am not sure anyone has succeeded yet.
One recent example of the firefox-patch.exe is listed in https://support.mozilla.org/en-US/forums/contributors/712056?last=69499#post-69498