Since a few weeks, I noticed a strange behavior in Firefox for android : at first when I when I wanted to type in the search box for example "sony", after the letters "s" an "o" were displayed, it opened the site "soamsung.com", and because I enabled URL filter in my antivirus (Dr. Web), I was redirected towards a warning page about "Not recommended websites". The same happened when I typed something beginning by "er": it opened "erbay.com", but this was blocked by URL filter as well. There was other examples like this, I begin to type, then I'm redirected.
So I uninstalled Firefox and reinstalled it. I precise no malware was found in Dr. Web so I tried Malwarebytes : no malware was found either. Later, despite reinstalling, I observed the same behavior, but this time with "to": the towitter.com website opened, but was blocked. So, by curiosity, I looked into the firewall feature of Dr Web (which record all internet connections of each app) and saw something : very late in the night or very very early in the morning (when I don't use Firefox because I'm sleeping), there is connections coming from Firefox to some IPs, different from a day to another. They seem to be located anywhere on the planet (one from Madrid,Spain or another from Oregon USA...) according to whatismyip.com and the ISP is Amazon.com Inc.
How can I solve this ?
Thanks for helping.