logo

SEO Spammers Go After Firefox Users

ID: 88642479-ba25-5797-b4d1-60d761e9caa6

STIX ID: report--88642479-ba25-5797-b4d1-60d761e9caa6

Feed Name: Zscaler Security Research Blog

Threat Score
50/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

A spam SEO campaign is distributing a malicious executable disguised as a Firefox update page that mimics the official Firefox site to trick Windows users into downloading ff-update.exe (low detection on VirusTotal). Internet Explorer visitors are redirected to fake AV pages; the report highlights active abuse, low AV detection, and the extension available to block such threats.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.