Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

More info

1. Pentest Tools Apk
2. New Hack Tools
3. Hacker Search Tools
4. Pentest Reporting Tools
5. Hacker
6. What Is Hacking Tools
7. Hacker Tools For Ios
8. Pentest Tools Online
9. Physical Pentest Tools
10. Hack Tools 2019
11. Hacker Tools For Mac
12. Hacking Tools For Windows
13. World No 1 Hacker Software
14. Hacking Tools Usb
15. Pentest Tools For Ubuntu
16. Hackers Toolbox
17. Computer Hacker
18. Hacking Tools For Windows
19. Pentest Tools Bluekeep
20. Termux Hacking Tools 2019
21. Pentest Tools Windows
22. Pentest Tools Url Fuzzer
23. Pentest Tools For Windows
24. Hack Tool Apk
25. Pentest Tools Android
26. Pentest Reporting Tools
27. Hack App
28. Best Pentesting Tools 2018
29. Github Hacking Tools
30. Hacker Tools For Pc
31. Hacker Tool Kit
32. Pentest Tools Bluekeep
33. Bluetooth Hacking Tools Kali
34. Top Pentest Tools
35. Hacking Tools For Windows 7
36. Hacker Tools List
37. Hackrf Tools
38. Hacker Security Tools
39. Pentest Tools Bluekeep
40. Pentest Tools Github
41. Hacking Tools 2019
42. Blackhat Hacker Tools
43. Kik Hack Tools
44. Pentest Recon Tools
45. Hacking Tools For Windows 7
46. What Are Hacking Tools
47. Hack And Tools
48. Hacking Tools Mac
49. Hack Tools Github
50. Hacker Hardware Tools
51. How To Install Pentest Tools In Ubuntu
52. Hacking Tools And Software
53. Hacker Security Tools
54. Hacking Tools Name
55. Hacker Tools List
56. Pentest Tools Bluekeep
57. Tools 4 Hack
58. Hacking Tools Name
59. Pentest Tools For Android
60. Hacker Techniques Tools And Incident Handling
61. Hacking Tools Software
62. Install Pentest Tools Ubuntu
63. Pentest Tools Linux
64. Hacking Tools For Pc
65. Bluetooth Hacking Tools Kali
66. Hacker Tools 2020
67. Hacker Security Tools
68. What Is Hacking Tools
69. Hacking Tools For Windows
70. Hacker Tools Free
71. Hack Tools Github
72. Hacker Tools Windows
73. Hacking Tools Mac
74. Hacking Tools Hardware
75. Hacking Tools For Kali Linux
76. Hack Tools
77. Hacking Tools Free Download
78. Hacking Tools Kit
79. Hacker Tools Online
80. Hacking Tools Windows 10
81. Nsa Hacker Tools
82. Free Pentest Tools For Windows
83. Hacker Tools
84. Pentest Tools Linux
85. Pentest Tools Framework
86. Hackers Toolbox
87. Hacking Tools Usb
88. Hacker Tools Free Download
89. Pentest Tools Website
90. Hacker Tools Software
91. Pentest Tools Find Subdomains
92. Hacking Tools Download
93. Hack Tools
94. Hacker Tools Mac
95. Pentest Tools Review
96. Wifi Hacker Tools For Windows
97. Hacking Tools For Pc
98. Pentest Tools Online
99. Hacking Tools For Windows
100. Hak5 Tools
101. Hacking Tools For Games
102. Hacking Tools Free Download
103. Pentest Tools Free
104. Hacker Tools For Mac
105. Hack Tool Apk No Root
106. What Are Hacking Tools
107. Hacker Tools Apk
108. Hacking Tools Software
109. Hack Tools For Pc
110. Hacker Security Tools
111. Blackhat Hacker Tools
112. Nsa Hacker Tools
113. Hack Tool Apk No Root
114. Hacker Tools Windows
115. Hacker Tools For Ios
116. Pentest Tools Website
117. Hacker Tools Linux
118. Pentest Tools Kali Linux
119. Hack Tools For Windows
120. Hacker Tools For Mac
121. Hacker Tools Free
122. Termux Hacking Tools 2019
123. New Hack Tools
124. Bluetooth Hacking Tools Kali
125. Pentest Tools For Mac
126. Hacker Tools Free
127. Hacker Tools
128. How To Install Pentest Tools In Ubuntu
129. Pentest Tools Nmap
130. Hacker Tools Github
131. Pentest Reporting Tools
132. Hack Rom Tools
133. Hacking App
134. Hack Tools Download
135. New Hacker Tools
136. Hacker Tools Apk
137. Hacking Tools Mac
138. Best Pentesting Tools 2018
139. Hacking Tools Github
140. Android Hack Tools Github
141. Hack Rom Tools
142. Hacking Tools For Games
143. Hack Tools For Ubuntu
144. What Are Hacking Tools
145. Pentest Tools Kali Linux
146. Pentest Recon Tools
147. Hacking Tools Github
148. Pentest Tools Alternative
149. Blackhat Hacker Tools
150. How To Install Pentest Tools In Ubuntu
151. Hacker Tools 2020
152. Pentest Tools For Android
153. Pentest Tools List
154. How To Hack
155. Hacker Tools Apk
156. Install Pentest Tools Ubuntu
157. Hack Website Online Tool
158. Hack Website Online Tool
159. Pentest Tools Port Scanner
160. Termux Hacking Tools 2019
161. Hack Tool Apk No Root
162. Hacker Tools Apk Download
163. Hacker Tools For Mac
164. Pentest Tools Bluekeep
165. Hack Tools
166. Game Hacking
167. Pentest Box Tools Download
168. Free Pentest Tools For Windows
169. Pentest Tools Bluekeep
170. Hack App
171. Underground Hacker Sites
172. Hacker Tools For Pc
173. Computer Hacker
174. Hacking Tools For Pc
175. Pentest Tools Nmap
176. Hacking Tools Hardware
177. Best Pentesting Tools 2018
178. Pentest Tools For Android