Firefox vulnerability claim was fabricated