Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Related links

1. Pentest Tools Free
2. Hacker Security Tools
3. Hack Tools For Games
4. Hacking Tools Hardware
5. Pentest Tools Alternative
6. Hacking Tools Kit
7. Pentest Tools Website
8. Hacking Tools Software
9. Hacker Security Tools
10. Hacking Tools Kit
11. Hacker Search Tools
12. Pentest Tools Online
13. Hacker Tool Kit
14. Hacking Tools And Software
15. Nsa Hacker Tools
16. Hacking App
17. What Is Hacking Tools
18. Hacking Tools For Windows 7
19. Hacker Tools Apk
20. Pentest Tools Nmap
21. Hak5 Tools
22. How To Make Hacking Tools
23. Hack App
24. Hackrf Tools
25. Hacker Hardware Tools
26. Hacker Tools Apk
27. Kik Hack Tools
28. Hack Tools Download
29. Hacker Tools For Mac
30. Pentest Automation Tools
31. Growth Hacker Tools
32. Hacking Tools For Kali Linux
33. How To Hack
34. Best Pentesting Tools 2018
35. Hacks And Tools
36. Hacking Tools Windows
37. Hacking Tools For Windows 7
38. Hacker Tools Software
39. Game Hacking
40. Hacker Tools Windows
41. Hacker Search Tools
42. Pentest Tools Website Vulnerability
43. Black Hat Hacker Tools
44. Hackers Toolbox
45. Hacker Tools Hardware
46. Pentest Tools Website
47. Pentest Recon Tools
48. Hacker Tools Mac
49. Hacker Tools For Mac
50. Hacking Tools For Windows 7
51. Hack Tools Online
52. Hacker Tools For Ios
53. Tools Used For Hacking
54. Hacking Tools For Windows Free Download
55. How To Make Hacking Tools
56. Hacker Tools Software
57. Bluetooth Hacking Tools Kali
58. Hacking Tools Github
59. Hack Tools Online
60. Hak5 Tools
61. Hacking Tools Pc
62. Pentest Tools Website
63. Hacking Tools 2020
64. Pentest Tools Nmap
65. Hack Tools Online
66. Hacker Security Tools
67. Hacker Tools
68. Pentest Tools Review
69. Pentest Tools Windows
70. Hacking Tools Name
71. Hacking Tools
72. Top Pentest Tools
73. Ethical Hacker Tools
74. Hack Tools For Ubuntu
75. Hack Tools For Ubuntu
76. Hacker Hardware Tools
77. Hacking Tools Name
78. Hacker Search Tools
79. Hacking Tools Free Download
80. Black Hat Hacker Tools
81. Pentest Tools Online
82. Hacking Tools For Windows
83. Hack Tools Mac
84. Pentest Tools Android
85. Underground Hacker Sites
86. Hacking Tools For Windows
87. Hacker Tools 2020
88. New Hack Tools
89. Hacking Tools Kit
90. Hacking Apps
91. Hacker Tools Free Download
92. Hacker Tools For Windows
93. Hacks And Tools
94. Hack Tools Download
95. Free Pentest Tools For Windows
96. Hacker Tools Linux
97. Hacking Tools Kit
98. Free Pentest Tools For Windows
99. Bluetooth Hacking Tools Kali
100. Hacker Tools Apk Download
101. Hacker Tools Free Download
102. Kik Hack Tools
103. Nsa Hacker Tools
104. Hacking Tools For Windows 7
105. Nsa Hack Tools
106. Pentest Tools Website Vulnerability
107. Hacker Tools Online