Malwarebytes for Firefox extension

Discussion in 'other anti-malware software' started by Theblackstar, Jan 13, 2018.

  1. Theblackstar

    Theblackstar Registered Member

    Joined:
    Mar 27, 2016
    Posts:
    36
    Location:
    Italia
    by Martin Brinkmann
    https://www.ghacks.net/2018/01/13/malwarebytes-for-firefox-extension/

    "Malwarebytes for Firefox is a new browser extension for the Firefox web browser by security company Malwarebytes. The release of the browser extension came out of the blue; the Malwarebytes website makes no mention of the release which leaves the Firefox add-on page and the extension itself as the only source of information."

    Does anyone have more accurate information? the extension is available for over a month and Malwarebytes seems to have not given news.
     
  2. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    7,247
    I just installed it and visited driverdetails.com and got the following message:
    Driverdetails.PNG

    This is the website for Driver Updater. It is a PUP, but is not malicious. I immediately remove the extension, as I only care about blocking of actual malicious websites.

    I scanned the URL driverdetails.com at VirusTotal and every scanner said it was clean.
     
  3. Nightwalker

    Nightwalker Registered Member

    Joined:
    Nov 7, 2008
    Posts:
    1,127
    Malwarebytes URL scanner is too agressive and false positive prone to my taste, I give up on MBAM3 because of this and because of the overall slowdown caused by the software.
     
  4. Theblackstar

    Theblackstar Registered Member

    Joined:
    Mar 27, 2016
    Posts:
    36
    Location:
    Italia
    In fact, I was more interested in knowing if users were aware of the news.
    It does not seem.
    At this point, let's see what users who try the extension think.
     
  5. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    949
    Does the link after "if you are certain this site is safe..." takes you to that site?
     
  6. Theblackstar

    Theblackstar Registered Member

    Joined:
    Mar 27, 2016
    Posts:
    36
    Location:
    Italia
  7. Victek

    Victek Registered Member

    Joined:
    Nov 30, 2007
    Posts:
    5,920
    Location:
    USA
    That's interesting. I hadn't heard about it and I wonder if it adds additional protection when MalwareBytes v3 is already running on the system?
     
  8. KevinYu0504

    KevinYu0504 Registered Member

    Joined:
    Mar 10, 2017
    Posts:
    119
    Location:
    Taiwan
    It looks like the extension had be remove ,
    can't find it on FireFox extension store .

    I already had Malwarebytes premium ,
    so this extension seems for those who don't have their premium people ?
     
  9. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    17,361
  10. reasonablePrivacy

    reasonablePrivacy Registered Member

    Joined:
    Oct 7, 2017
    Posts:
    899
    Location:
    Member state of European Union
    Little offtopic: From my experience VirusTotal rarely says malicious site is infected. On my spam mail account I receive at least one link to suspicious site per week and VT never said it is infected.
    I also browsed WWW someday and discovered site aggresivly trying to install extension into browser. That website mitigated my attempts to close tab (maximizing window, showing false bar, displaying Do you really want to close this site?). None of scanners at VT discovered any infection. The site was clean for them.
     
  11. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    7,247
    I believe so, but I didn't check that before I removed it.
     
  12. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    7,247
    I only use Malwarebytes as an on demand scanner and have all the protection disabled, to avoid such issues.
     
  13. plat1098

    plat1098 Guest

    People will recognize the name Malwarebytes, install this at once and then head over to the website for a look at the software for sale.
     
  14. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,444
    Has anyone considered going to the Malwarebytes forum and asking. I don't see anything there and have a hunch it's a fake
     
  15. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    7,247
    I just did a Google search for site:malwarebytes.com "malwarebytes for firefox" and it returned no results, which does suggest it may be fake.
     
  16. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    7,247
    It's back, I just installed it again.
    https://addons.mozilla.org/en-US/firefox/addon/malwarebytes/
    It gives you two options:
    • Add driverdetails.com to exclusions temporarily
    • Add driverdetails.com to exclusions permanently
    I select the first option and was taken the website. When I visited the website again, I did not got get any page from the extension. Maybe pages remain exluded until you restart Firefox.
     
    Last edited by a moderator: Jan 13, 2018
  17. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    17,361
    After a restart of Firefox it is still listed in Exceptions:
    Malwarebytes_for_Firefox_beta.png
    I have looked into the file exlusions.js (malwarebytes-1.0.4-an+fx.xpi\utils\exclusions.js) and a temporary exclusion will be automatically removed after 5 minutes:
    Code:
    if( exclusion.type === utils.ExclusionsTypeDomainTemporary )
         if(                                 Date.now() > ( exclusion.date + 5*60*1000 ) )
             utils.exclusionsRemove( exclusion );
    
     
    Last edited: Jan 13, 2018
  18. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,444
    I don't know what this is, but I really don't think it's from Malwarebytes. One of the MT guys found a post from an Admin over at MB and he said they had no such thing as they didn't need it. Be aware it is most likely a fraud and potentially dangerous
     
  19. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    949
  20. Circuit

    Circuit Registered Member

    Joined:
    Oct 7, 2014
    Posts:
    854
    Location:
    Land o fruits and nuts, and more crime.
    Why would Firefox or MB allow this to even be shown?
    FF really cares about add-on's o_O
    And why would MB be so silent?
     
  21. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,444
    It is a long weekend here. Other than that I don't know.
     
  22. Circuit

    Circuit Registered Member

    Joined:
    Oct 7, 2014
    Posts:
    854
    Location:
    Land o fruits and nuts, and more crime.
    Now to me, both are untrustworthy big-time.
    Long weekend?
     
  23. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    949
    To be fair, it was featured in this article.
    https://www.ghacks.net/2018/01/13/malwarebytes-for-firefox-extension/

    However it appears the author hasn't gotten in contact with Malwarebytes. And until Malwarebytes releases an official statement regarding the extension, I would highly recommend everyone to be careful.
     
  24. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,444
    If the author hasn't been in touch with Malwarebytes and using their name and Logo he has a problem and ghacks is dangerously careless
     
  25. plat1098

    plat1098 Guest

    Hmmm. Yes, if you read the comments, way down there someone is also mentioning concern about a fake extension. If it's valid, why be so mysterious about its debut? I'm interested in the outcome--is it legit, or not?
     
Loading...
Similar Threads
  1. XenMan
    Replies:
    10
    Views:
    1,476
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.