Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

FYI: There is a fake "emergency Firefox update" coming from https://eudorbollywoodkhabri.net. Just wanted to alert you. Austin Matlow

more options

My wife has had this fake alert pop up on her screen twice. It looks legitimate until you look at the URL: https://eudorbollywoodkhabri.net/2761665825848/b3b5eea7c804fb9d091e...


.edited email from spambots and public as nobody here or at Mozilla would contact by email.

My wife has had this fake alert pop up on her screen twice. It looks legitimate until you look at the URL: https://eudorbollywoodkhabri.net/2761665825848/b3b5eea7c804fb9d091e... .edited email from spambots and public as nobody here or at Mozilla would contact by email.
Attached screenshots

Modified by James

All Replies (1)

more options

Hi Austin, you are right to be suspicious, this is a fake patch that installs malware. Over the past two weeks they have constantly created new sites to bypass the reputation filters built into Firefox -- by default, Firefox doesn't load sites known to distribute malware; this data is compiled by Google and you can submit sites to Google here: https://www.google.com/safebrowsing/report_badware/

The prevailing theory is that one or more advertising networks are spreading an ad that causes a new window or tab to open with that page. Do you recall or can you tell from your wife's history what site she was viewing when it opened?

Do you share the same Firefox with your wife? Just wonder whether your ad blocker makes any difference in seeing or not seeing this popup.