Contractors chosen by the Thunderbird Council (a group of volunteers from the community) and paid by third-party donations. Mozilla just serves as the fiscal intermediary.