Should file a bug with firefox and see what excuses they generate.
What does site getting hacked have to do with Firefox? Why/how should FF have prevented the locking behavior you experienced? This is a very common scam.
I'm surprised that Firefox can be "customized" to hide the red close button.