Firefox "Report Attack" Message

Firefox, Thunderbird, SeaMonkey, Camino, Mozilla, Netscape 6/7/8/9, and all Gecko-based browsers discussion and support forum.
(MozInfo701, Netscape Browser Archive)

Moderators: Antony, Edward, profman, Ramona

Firefox "Report Attack" Message

Postby FrankoSport » Mon 04 Aug, 2008 2:57 am

Greetings ....

Within the past couple of days, something new to my experience has occurred.

When using Firefox 3.0.1 on my home PC, and when accessing pages at Sports Network-dot-com, I am taken to a screen called "Reported Attack Site". I am given the options of continuing, not continuing or finding out why the site is being blocked.

When choosing the "Why is this site blocked?" option, I am taken to another screen which explains that Google has detected recent suspicious activity at Sports Network, including the possible presence of malware.

That explanation seemed reasonable enough. The Sports Network site (a CNN property) was recently attacked by someone in China, according to a message that briefly appeared on their pages after this happened.

Incidently, I was not accessing Sports Network from Google, but rather from my own web-site links, either on the site online or thru local pc files. Also, this "Report Attack" thing is happening only in Firefox 3.0.1, but not in MS-IE or Opera. I do not yet know if this occurs in Firefox 2.0.0.xx.

Now, if this "Report Attack" screen is a Firefox feature, where is the Tool Option to customize/enable/disable? Would really like to know!

As a guide for understanding, I have made capture images of the "Report Attack" screens. You can view them at this web-link »»» Report Attack Screenshots - Please note that my web-site provider's server has been running medium-to-slow lately, so please be patient while the page loads.

Would greatly appreciate any advice/suggestions/whatnot on this one.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Last edited by FrankoSport on Mon 04 Aug, 2008 3:25 am, edited 1 time in total.
Thanx-A-Lot and Enjoy, Frank-0-Sport
FrankoSport
super member
super member
 
Posts: 137
Joined: Sun 05 Jan, 2003 12:04 pm

Postby Don_HH2K » Mon 04 Aug, 2008 7:14 am

What's likely is that Firefox's filtering relies on Google's blacklist. This wouldn't be at all surprising given that Mozilla and Google have partnered on various things before, such as the Google-enhanced "Firefox Start" page.

It sounds to me like you may have a false positive. I once encountered roughly the same thing on my city's website, where both Google and NOD32 claimed that a WordPress stats page was a trojan in disguise.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.0 x64; en-US; rv:1.9.0.1) Gecko/2008071912 Minefield/3.0.1 (mmoy CE K8Q-X06)
Laptop: HP Compaq nx6325 - Turion 64 X2 @ 2GHz, 2GB DDR2, 100GB HD, ATI Radeon X300, 15" LCD, Seven Pro
Handheld: Palm Treo 650 - Intel PXA270 @ 312MHz, 10MB RAM, 32MB flash, 2.7" LCD, Palm OS 5.4
User avatar
Don_HH2K
Moderator
Moderator
 
Posts: 5112
Joined: Sun 09 May, 2004 3:59 pm

Postby Fulvio » Mon 04 Aug, 2008 10:50 am

Tools|Options|Security|there are two tell me... boxes. I have unchecked the boxes at times, but, since I can make a decision, there is nothing wrong knowing about certain activities, and would not uncheck such boxes.
Why would you not have this feature in IE, and Opera. They, just don't have it. Not sure if it is in FF2.0.0.16, but the boxes are in the same location.
Let me put it this way. In the past couple of months my AntiVirus reported a couple of unexpected files/sites to have trojans. I don't have a clue how I got them, but, surely not using FF3.0.1.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Last edited by Fulvio on Mon 04 Aug, 2008 4:34 pm, edited 2 times in total.
A minority may be right, and a majority is always wrong
~ Henrik Ibsen
WinXP, SP3, 512 MB, SM2.9.1, FF12, TB12.0.1, IE8.0, Google Chrome18, Ghostwall , Avast 7.x, JRE1.7_04. Testing FF13b3
User avatar
Fulvio
Moderator
Moderator
 
Posts: 11915
Joined: Wed 19 Jun, 2002 10:08 am

Firefox Attack Message

Postby powerwalk » Mon 04 Aug, 2008 1:05 pm

I, too, encountered this same warning on my city’s website. I emailed the web master to ask when they became an attack site. He answered that someone hacker the site and did indeed put malware into many of the pages. He had been working all night to remove it.

So, when in doubt, get off the site. It isn’t worth taking a chance to see if it’s a false positive or a real threat. Why would you want to disable this feature?
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
powerwalk
member
member
 
Posts: 54
Joined: Sun 27 Jul, 2003 6:55 pm

Re: Firefox Attack Message

Postby James » Mon 04 Aug, 2008 1:47 pm

powerwalk wrote: Why would you want to disable this feature?


Indeed. :roll:
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
James
User avatar
James
diamond member
diamond member
 
Posts: 2707
Joined: Sat 13 Jul, 2002 12:10 am
Location: Pacific NW USA

Postby FrankoSport » Tue 05 Aug, 2008 8:15 am

Greetings ....

OK. I now see that this is a Firefox 3.x safety feature. I'll keep it turned on.

One observation - if specific threat sites are being reported, then the full URL of such sites should be provided for anyone using Adblock.

OR - better yet, integrate Adblock into Firefox itself, then have procedures to filter out the suspicious stuff and allow normal access of the otherwise legitimate site - like Sports Network. Normal means you don't get a warning for every Sports Network (or whatever site it is) page you visit.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Thanx-A-Lot and Enjoy, Frank-0-Sport
FrankoSport
super member
super member
 
Posts: 137
Joined: Sun 05 Jan, 2003 12:04 pm

Postby Fulvio » Tue 05 Aug, 2008 11:11 am

FrankoSport wrote:Greetings ....

OK. I now see that this is a Firefox 3.x safety feature. I'll keep it turned on.

One observation - if specific threat sites are being reported, then the full URL of such sites should be provided for anyone using Adblock.

OR - better yet, integrate Adblock into Firefox itself, then have procedures to filter out the suspicious stuff and allow normal access of the otherwise legitimate site - like Sports Network. Normal means you don't get a warning for every Sports Network (or whatever site it is) page you visit.

Adblock is an add-on to Firefox, and so, it is not part of Firefox. If anything, an add-on must adapt to Firefox. But, right clicking on an empty spot of a suspected page|View Page Info provides even more information that I would know how to use..
As for Adblock integration into Firefox, it cannot be done for the reasons given above. There would be a need of agreement between the developers of the add-on and Mozilla Firefox. It is not that simple.
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
A minority may be right, and a majority is always wrong
~ Henrik Ibsen
WinXP, SP3, 512 MB, SM2.9.1, FF12, TB12.0.1, IE8.0, Google Chrome18, Ghostwall , Avast 7.x, JRE1.7_04. Testing FF13b3
User avatar
Fulvio
Moderator
Moderator
 
Posts: 11915
Joined: Wed 19 Jun, 2002 10:08 am

Postby FrankoSport » Wed 06 Aug, 2008 2:19 am

Greetings ....

As of now, my Firefox "Attack" and "Forgery" alerts are on, and will stay on.

Sports Network is now in the clear, it would seem. I am no longer getting the "Attack" alert when accessing Sports Network pages.

Thanx-A-Lot, Frank-0-Sport
UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
FrankoSport
super member
super member
 
Posts: 137
Joined: Sun 05 Jan, 2003 12:04 pm


Return to Firefox, SeaMonkey and Netscape

Who is online

Registered users: Google [Bot], Yahoo [Bot]