Malicious Firefox add-ons removed by Mozilla
Firefox users used, or rather abused, the proxy API to block Firefox updates. Recently, Mozilla blocked malicious add-ons from more than 450,000 users.
According to reports, the add-ons, namely Bypass and Bypass XM, used the API to intercept and redirect web requests to prevent users from downloading updates, updating configured content remotely, and preventing users from downloading updates. ” access updated block lists.
Bleeping Computer report status: “To prevent additional users from being affected by new add-on submissions that misuse the proxy API, we suspended approvals for add-ons that used the proxy API until fixes are available to all users, âMozilla’s Rachel Tublitz and Stuart Colville said.
According to Mozilla, users are advised to update their browsers to the recent version which is Firefox 93, and claims that this version will help them be protected from add-ons making the proxy API vulnerable.
If users haven’t run Firefox 93 and have not turned off browser updates, they could be affected by this issue. To make sure this doesn’t happen, try updating Firefox to the latest versions, as it contains an updated blocklist designed to automatically disable these malicious add-ons.
If users want to make sure there are no traces left, you can also refresh Firefox to reset all add-ons and settings or start over by downloading and installing a new copy of Firefox.