Fake Firefox Malvertising Trap -- Beware!
Over the last week, I have been seeing an imitation Firefox page appear. It tells me that I need to update.
Firefox updates automatically. I knew something was wrong.
I check the URL. It ended in .js.
I closed the box by clicking the X in the upper right-hand corner. I was afraid to click the Cancel button. It might be fake, too. There is a fake Chrome scam floating around. Here is the problem.
The Neu.hsdyhp.com runs a JavaScript code producing a dialog box, telling you you’ll have to “Add Extension to Leave”. Clicking “Cancel” once changes it to add a tick box marked “Prevent this page from creating additional dialogs” Thinking that this is the ticket out of the page, you will tick that box and click “OK”. At this point, your tab will go into “Full Screen” mode, and you will be prompted to install a malicious extension.
I did not want to be fooled twice. So I closed the entire screen.
I checked with Firefox about this. Sure enough, I am not alone. They reported on the same fake page I had seen.
The problem is, people instinctively click the Save File button.
I have seen it pop up on maybe five different sites. This is a sneaky malvertising trap. The moment you see it, my advice is to close your entire screen. Better safe than sorry.