The developer community should be aware we’ve detected a phishing campaign targeting AMO (addons.mozilla.org) accounts. Add-on developers should exercise extreme caution and scrutiny when receiving emails claiming to be from Mozilla/AMO. Phishing emails typically state some variation of the message “Your Mozilla Add-ons account requires an update to continue accessing developer features.”
In order to protect yourself and keep your AMO account secure, we strongly recommend that you:
- Do not click any links in the email.
- Verify the email was sent by a Mozilla-owned domain: firefox.com, mozilla.com, mozilla.org, mozillafoundation.org (or their subdomains).
- Ensure that the email passes SPF, DKIM, and DMARC checks (consult your email provider and/or email client’s support documentation for details).
- Validate that links in the email point to firefox.com, mozilla.com, mozilla.org, mozillafoundation.org (or their subdomains) before opening them; even better, navigate directly to these domains rather than clicking a link via email.
- Only enter your Mozilla username and password on Mozilla-owned domains.
For more information on how to detect and report phishing scams, please see these helpful guides from the U.S. Federal Trade Commission and the U.K. National Cyber Security Centre, or consult your local government.
If we uncover more details to share we’ll update this post accordingly.
Juraj
wrote on
manas
wrote on