Cyber Risks · Krebs on Security

Comcast Hijacks Firefox Homepage: “We’ll Fix”

Summary: Comcast's Xfinity installation software for new customers changed the Firefox homepage to comcast.net on Macs and modified the browser profile so users could not change it back. Comcast spokesman Charlie Douglas acknowledged the software hijacks Firefox settings, said the problem was limited to Mac users and the permanence was unintentional, and said the company is correcting the installation software; Mozilla denied Comcast's initial claim that it was a Firefox bug.

Bottom line: An ISP's required install package silently locked a browser setting on customer machines and the company first blamed the browser vendor, which is the kind of change that lands on your endpoints through a vendor your users trust and that your standard controls never flag.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related