Comrade Angles utilise witches.town. Vous pouvez læ suivre et interagir si vous possédez un compte quelque part dans le "fediverse".
...My browser just randomly opened a tab for addonbrowser.com and a dialog for "install - Allow, deny?"
I am very creeped out. :/
I denied it, of course, because duh. :/
@Angle Which browser are you using? If it's actual malware (instead of an accidental key combo making for spooky effects) I wonder if this is an effect of browsers making it harder for malware to auto-install extensions. Just ask the human to do it!
@varx Firefox. And the sit's a little sketchy - it looks like they're trying to pretend to be an official firefox site, but they're clearly not. :/
!!Possible Malware Link!! Afficher plus
@varx Yeah I poked around the rest of it. Not much actual depth, besides a redirect to a site selling herbal supplements or womething. :/
@Angle Domain's 76 days old. (Registrar in Vietnam, interesting!) Ton of unusual ad site scripts get loaded in, and there's obfuscated scripts in the page itself. One of them (starting "Privet darkv. Each domain is 2h fox dead") appears to try to load a script from a list of domains, some high-entropy, if this paste I found has any relation: https://pastebin.com/LN0HiN2i
Glad I'm not running scripts on that site, although it does mean it's not easy to find the .XPI file it's trying to install.