This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

New type of fake urgent update

  • 2 replies
  • 9 have this problem
  • 16 views
  • Last reply by RainyDayz

more options

Today I got a new type of fake urgent update. Normally what happens when I get one is that it hijacks the page I'm on and puts up what looks like a red firefox page with URGENT UPDATE scrawled across it, and a box opens wanting me to download the "update" aka malware or whatever malicious software it might me. Today what happened is that the "update" download box appeared wanting me to click on it, no I did not get a screen shot of it, but it was without the Urgent Update page. Later when I went close the tab it asked if I wanted to close 2 tabs, it was only then that I noticed 2 tabs were open, the second was the Urgent Update fake Mozilla page. This was the address of the page that had opened eufeehostingdude.net . I tried googling the name and nothing came up. The only time I get these is when I click on pages on FB, usually they try and piggy back in on apps, but today it was a legitimate news page.

Today I got a new type of fake urgent update. Normally what happens when I get one is that it hijacks the page I'm on and puts up what looks like a red firefox page with URGENT UPDATE scrawled across it, and a box opens wanting me to download the "update" aka malware or whatever malicious software it might me. Today what happened is that the "update" download box appeared wanting me to click on it, no I did not get a screen shot of it, but it was without the Urgent Update page. Later when I went close the tab it asked if I wanted to close 2 tabs, it was only then that I noticed 2 tabs were open, the second was the Urgent Update fake Mozilla page. This was the address of the page that had opened eufeehostingdude.net . I tried googling the name and nothing came up. The only time I get these is when I click on pages on FB, usually they try and piggy back in on apps, but today it was a legitimate news page.

Chosen solution

It's good that you recognize it is fake. The official Firefox updates are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux or by download from mozilla.org like say www.mozilla.org/firefox/all/

btw Firefox 48.0 has been the current Release since Aug 2nd as you appear to be using 47.0.1 as you can either update in Firefox or by download. https://www.mozilla.org/firefox/48.0/releasenotes/

You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/

This fake firefox-patch file scam going on now is not new as the firefox-patch.exe and then switch to firefox-patch.js (since July 11) has been around for a few months now as you can see at https://support.mozilla.org/en-US/forums/contributors/712056 and https://support.mozilla.org/en-US/forums/contributors/712075

Read this answer in context 👍 3

All Replies (2)

more options

Chosen Solution

It's good that you recognize it is fake. The official Firefox updates are done internally in Firefox (with a .mar type of file) whether on Windows, Mac OSX or Linux or by download from mozilla.org like say www.mozilla.org/firefox/all/

btw Firefox 48.0 has been the current Release since Aug 2nd as you appear to be using 47.0.1 as you can either update in Firefox or by download. https://www.mozilla.org/firefox/48.0/releasenotes/

You could try using a adblocker extension like uBlock Origin to block theses fake ads if you keep getting them. https://addons.mozilla.org/firefox/addon/ublock-origin/

This fake firefox-patch file scam going on now is not new as the firefox-patch.exe and then switch to firefox-patch.js (since July 11) has been around for a few months now as you can see at https://support.mozilla.org/en-US/forums/contributors/712056 and https://support.mozilla.org/en-US/forums/contributors/712075

Modified by James

more options

Thanks for replying, I'll definitely update the version of firefox I'm using.

I've gotten the fake update page quite a few times but in the past it had always hijacked the page I was on, today was the first time it had ever opened a new tab. It's opening a new tab was why I thought it might be a new version of the scam.