Firefox account hacked?

VPN
1

I haven’t used Firefox in ages, but I got a strange email in Chinese that my Mozilla account had been used. The email address sending it seems legit, but I’m still skeptical so i Google the login page and login. Two different Chinese computers had been added to it, one of which was under “Mozilla VPN”. I should’ve taken a screenshot, but whatever. I don’t use firefox very much (I think it was last touched in 2018) and so just deleted the account when I logged in and added 2FA first in case they try to recreate it and settings persist, but my question is basically:

What could they have been after in my account?

What sensitive information am I at risk of losing?

Is there anything else I should do?

2

Is there anything else I should do?

You should start using unique/long passwords for every account = randomly generated by a Password manager like this

rf2*byg7#Qb@b#kuQ4do$2CnUrsDb4

The only password you will have to remember is the one to your vault

I personally use Bitwarden

This is CRITICAL along with 2FA everywhere you can

I would start by going here https://haveibeenpwned.com/

You can also check the password you were using for the Mozilla account

For Mozilla accounts you can use Authenticator app as 2FA which is what I use on my account

3

Habe die ebend Grade bekommen.

4

Got this exact email too during the night. Havent used Mozilla for prob like 10 years

5

Same thing happened to me this morning. Frequent user here.

6

Just got an email too.

The only thing I can see in my account is under activites a “Login initiated” at the same time the email came. I don’t think they succeeded? Not sure though. No idea what my password was, as I haven’t used Mozille in probably 10 years. I reset my password to gain access to the account. No new devices have been added. I will delete the acconut.

7

The email address sending it seems legit

A sender’s email address can very easily be spoofed, so this is nothing to go on. I regularly get spam mail supposedly from my own email account, with texts like “As you can see, I hacked into your computer.” No. They didn’t.

In your case this is a likely a similar issue. Someone is trying to convince you that your account got hacked, hoping you’ll fall for it and pay them money or install some software or otherwise.

Obviously, I can’t be totally sure you didn’t get hacked. But it seems more likely that you did not, and that this is just a scam.

8

Same thing just happened to me. Changed password and added 2FA.
I would suggest you check whether you had some passwords saved and synced in Firefox as those should probably be considered compromised

9

I received the same email this morning.

I logged it to accounts.firefox.com and immediately changed my password.

mozilla vpn was connected as a service.

I don’t remember using it before, so I disconnected it.

https://imgur.com/a/9gd9DQH

10

They got mine as well recently, Never used Firefox in a while.

11

Well, I definitely did get hacked I logged into the account after googling the Mozilla login (so not clicking the link on the email) and saw a strange Chinese computer linked to the VPN.

12

after doing the above, I received the same activity notification email from mozilla.

both emails had the same format and the links are exactly the same, except for two details:

  1. the first email was in chinese and the the subject was “Mozilla VPN 有新的登录活动” or “Mozilla VPN has new logins”
  2. the second email was in english, but the subject simply said “New sign-in to your Mozilla account”
13

My bad, I misread your post. I do not use a Mozilla account myself so I cannot advise you on this.

14

how do you know your firefox mozilla account was hacked?

as for the vpn service, I couldn’t find any login details in my mozilla account.

15

this just happened to me, exact same email in chinese. did you start using any new app on your device this last week or signed up for anything? just curious, litterally signed up on deepseek was just thinking my email got shared.

16

Because when I logged in I saw that a Chinese computer had been attached to it

17

no new apps, nothing new.

question: have you had an email breached in the past and reported by HaveIBeenPwned or Mozilla Monitor?

18

I haven’t signed up for DeepSeek (to my knowledge) but I’ve definitely been in leaks before, I think it’s one of those

19

did you see that under

/settings#connected-services

20

Unfortunately I don’t remember, but probably, yeah. I deleted the account cause I just don’t use it and so don’t really care.