Mozilla company reported on distance from the Addons.mozilla.org (AMO) of two additions – BYPASS and BYPASS XM, which numbered 455 There are thousands of active attitudes and were positioned as additions to provide access to full texts of materials distributed by paid subscription (bypass Paywall ). To modify traffic in the additions, API Proxy , allowing you to control the Web requests executed by the browser . In addition to the declared functions, the specified additions were used by API Proxy to block appeals to Mozilla servers, which did not allow you to download updates to Firefox and led to the accumulation of disassembled vulnerabilities, with which the attackers could attack users of users.
It is noteworthy that in addition to preventing the updates of Firefox versions as a result of the activities of the add-ons under consideration, the update of the remotely customizable browser components was also violated and access to Lock Lists , allowed to disable malicious supplements already installed on users. Users are encouraged to check the current version of the browser – if the settings specifically disabled the update auto install and the version differs from Firefox 93 or 91.2. You should update manually. In the new releases of Firefox supplements BYPASS and BYPASS XM are already included in the blacklist, so after updating the browser they will be turned off automatically.
To protect against placement in the future, malicious additions blocking downloads and black lists, starting with Firefox 91.1, changes were made to the implementation of direct access to the download and update servers, if the request through proxy was unsuccessful. To distribute protection for users of any versions of Firefox, a forcibly installed System Supplement “Proxy Failover”, which prevents incorrect use of the Proxy API to block Mozilla services. Before the widespread distribution of the proposed method of protection, the reception in the catalog addons.mozilla.org new additions using API proxy is suspended.