Re: Why are recent Firefox (for Windows) downloads ALL being found to contain ransomware?
Joel Esler via clamav-users <[email protected]> Mon, 30 Mar 2026 20:00:38 -0400
| Newsgroups | gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <[email protected]> |
SGF2ZSB5b3UgcmVwb3J0ZWQgdGhlc2UgYXMgZmFsc2UgcG9zaXRpdmVzIG9uIHRoZSBDbGFtQVYg d2Vic2l0ZT8KCj4gT24gTWFyIDI2LCAyMDI2LCBhdCA3OjA54oCvUE0sIFBhdWwgS29zaW5za2kg dmlhIGNsYW1hdi11c2VycyA8Y2xhbWF2LXVzZXJzQGxpc3RzLmNsYW1hdi5uZXQ+IHdyb3RlOgo+ IAo+IEkgb25seSBoYXZlIDEuMC45IGluc3RhbGxlZCwgc28gSSBkb24ndCBjdXJyZW50bHkgaGF2 ZSBhIHdheSB0byB0ZXN0IGl0IHdpdGggZWl0aGVyIDEuNS54IG9yIDEuNC54LiAKPiAKPiBTbyBJ IHN1Ym1pdHRlZCB0aGUgIkZpcmVmb3ggU2V0dXAgMTE1LjM0LjBlc3IuZXhlIiBmaWxlIHRvIFZp cnVzVG90YWwsIGFuZCBub25lIG9mIHRoZWlyIHNjYW5uZXJzIGZvdW5kIGEgdmlydXMuCj4gSSB0 aGVuIGFza2VkIFZpcnVzVG90YWwgKG5vdyBvd25lZCBieSBHb29nbGUpIHdoYXQgdmVyc2lvbiBv ZiBDbGFtQVYgdGhleSBydW4sIGJ1dCB0aGV5IGhhdmVuJ3QgcmVwbGllZCBhcyBvZiBhIGZldyBt aW51dGVzIGFnby4KPiAKPiBJIHJlYWxpemUgdGhhdCBDbGFtQVYgMS4wLjkgaXMgIkVPTCIsIGJ1 dCBvbmUgY2FuIHN0aWxsIG9idGFpbiAib2ZmaWNpYWwiIHNpZ25hdHVyZSBmaWxlcyBmb3IgYW5v dGhlciB5ZWFyIGJleW9uZCB0aGF0Lgo+IAo+IERpc3R1cmJpbmdseSwgdGhlIFZlcnNpb24gU3Vw cG9ydCBNYXRyaXggc2F5cyB0aGF0LCBmb3IgMS4wIExUUywgc2lnbmF0dXJlcyBhcmUgTk9UIHRl c3RlZCBmb3IgZmFsc2UgcG9zaXRpdmVzIChGUCkgYWZ0ZXIgMS4xIHdhcyByZWxlYXNlZC4gSW4g dGhpcyBjYXNlIHRoYXQncyBhYm91dCAyLjUgeWVhcnMgQkVGT1JFIDEuMC45IEVPTC4KPiAKPiBT byBXSEFUIEVYQUNUTFkgRE9FUyBMVFMgTUVBTj8/IEZvciAxLjAgTFRTLCBpdCBzZWVtcyB0aGF0 IG5vIDEuMC54IGNhbiBiZSBGVUxMWSB0cnVzdGVkIGFmdGVyIDEuMSB3YXMgcmVsZWFzZWQuIFRo aXMgaXMgbm90IHdoYXQgSSB3b3VsZCBjaGFyYWN0ZXJpemUgYXMgTFRTLgo+IAo+IEZ1cnRoZXJt b3JlLCBzaW5jZSB0aGUgREIgZmlsZXMgY2FuIHN0aWxsIGJlIGRvd25sb2FkZWQgb25lIHllYXIg YWZ0ZXIgbm9taW5hbCBFT0wgKG11Y2ggbGVzcyBFbmQgT2YgVHJ1c3QpLCB3aHkgZG9lc24ndCBm cmVzaGNsYW0gYXQgbGVhc3QgaXNzdWUgYSB3YXJuaW5nIGFtb25nIGl0cyBsYXJnZSBudW1iZXIg b2YgbWVzc2FnZXMgdGhhdCBFT0wgaXMgcGFzdD8KPiAKPiBGaW5hbGx5LCBJIGludGVuZCB0byAo dHJ5IHRvKSBpbnN0YWxsIDEuNCBMVFMgaW4gdGhlIG5lYXIgZnV0dXJlLiBCdXQgd2lsbCB0aGlz IGhlbHA/IEFjY29yZGluZyB0byB0aGUgVmVyc2lvbiBTdXBwb3J0IE1hdHJpeCwgRlAgdGVzdGlu ZyB3aWxsIG5vdCBiZSBkb25lIGZvciAxLjQgTFRTIGFmdGVyIDEuNSBpcyByZWxlYXNlZC4gT29w czogdGhhdCB3YXMgbGFzdCBPY3RvYmVyICgyMDI1KSEKPiAKPiAtLS0tLS0tLS0tLS0tLS0tLS0t LS0KPiAKPiBPbiBUaHUsIDI2IE1hciAyMDI2IDE4OjE3OjM4ICswMDAwIChHTVQpCj4gQW5kcmV3 IEMgQWl0Y2hpc29uIHZpYSBjbGFtYXYtdXNlcnMgPGNsYW1hdi11c2Vyc0BsaXN0cy5jbGFtYXYu bmV0PiB3cm90ZToKPiAKPj4gT24gVGh1LCAyNiBNYXIgMjAyNiwgUGF1bCBLb3NpbnNraSB2aWEg Y2xhbWF2LXVzZXJzIHdyb3RlOgo+PiAKPj4+IEZvciBleGFtcGxlOgo+Pj4gCj4+PiBGaXJlZm94 IFNldHVwIDE0MC45LjBlc3IuZXhlICAtLT4gV2luLlRyb2phbi5TcG9yYS03NzI0NDQyLTAgRk9V TkQKPj4+IEZpcmVmb3ggU2V0dXAgMTE1LjM0LjBlc3IuZXhlIC0tPiBXaW4uVHJvamFuLlNwb3Jh LTc3MjQ0NDItMCBGT1VORAo+Pj4gRmlyZWZveCBTZXR1cCAxMTUuMzQuMGVzci5tc2kgLS0+IFdp bi5Ucm9qYW4uU3BvcmEtNzcyNDQ0Mi0wIEZPVU5ECj4+PiAKPj4+IAo+Pj4gVGhlc2UgYXJlIGZy b20gQ2xhbUFWIDEuMC45IGNsYW1kIG9uIExpbnV4IHJlY2VpdmluZyBmaWxlIHRvIGJlIHNjYW5u ZWQgb3ZlciBUQ1AuICAKPj4gCj4+IGh0dHBzOi8vZG9jcy5jbGFtYXYubmV0L2ZhcS9mYXEtZW9s Lmh0bWwjdmVyc2lvbi1zdXBwb3J0LW1hdHJpeAo+PiBzdWdnZXN0cyB0aGF0IDEuMC45IHdlbnQg ZW5kLW9mLWxpZmUgTm92LTI4IDIwMjUKPj4gVmVyc2lvbiAxLjMgaXMgYWxzbyBFT0wuCj4+IAo+ PiBDYW4geW91IHZlcmlmeSB0aGUgcHJvYmxlbSB3aXRoIHZlcnNpb24gMS40LjMgb3IgMS41LjEg Pwo+PiAKPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwo+ IAo+IE1hbmFnZSB5b3VyIGNsYW1hdi11c2VycyBtYWlsaW5nIGxpc3Qgc3Vic2NyaXB0aW9uIC8g dW5zdWJzY3JpYmU6Cj4gaHR0cHM6Ly9saXN0cy5jbGFtYXYubmV0L21haWxtYW4vbGlzdGluZm8v Y2xhbWF2LXVzZXJzCj4gCj4gCj4gSGVscCB1cyBidWlsZCBhIGNvbXByZWhlbnNpdmUgQ2xhbUFW IGd1aWRlOgo+IGh0dHBzOi8vZ2l0aHViLmNvbS9DaXNjby1UYWxvcy9jbGFtYXYtZG9jdW1lbnRh dGlvbgo+IAo+IGh0dHBzOi8vZG9jcy5jbGFtYXYubmV0LyNtYWlsaW5nLWxpc3RzLWFuZC1jaGF0 CgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwoKTWFuYWdl IHlvdXIgY2xhbWF2LXVzZXJzIG1haWxpbmcgbGlzdCBzdWJzY3JpcHRpb24gLyB1bnN1YnNjcmli ZToKaHR0cHM6Ly9saXN0cy5jbGFtYXYubmV0L21haWxtYW4vbGlzdGluZm8vY2xhbWF2LXVzZXJz CgoKSGVscCB1cyBidWlsZCBhIGNvbXByZWhlbnNpdmUgQ2xhbUFWIGd1aWRlOgpodHRwczovL2dp dGh1Yi5jb20vQ2lzY28tVGFsb3MvY2xhbWF2LWRvY3VtZW50YXRpb24KCmh0dHBzOi8vZG9jcy5j bGFtYXYubmV0LyNtYWlsaW5nLWxpc3RzLWFuZC1jaGF0Cg==