Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Related posts

1. Hacker Tools Linux
2. Pentest Tools Bluekeep
3. New Hack Tools
4. Tools For Hacker
5. What Are Hacking Tools
6. Hacker Tools For Mac
7. Hacking Tools For Games
8. Pentest Tools Url Fuzzer
9. Best Pentesting Tools 2018
10. Hack Rom Tools
11. Bluetooth Hacking Tools Kali
12. Top Pentest Tools
13. Hacking Tools For Kali Linux
14. Hacker Tools For Mac
15. Hacking Tools Windows
16. Hacker Tool Kit
17. Top Pentest Tools
18. Hack Tools Pc
19. World No 1 Hacker Software
20. Hack Tools Download
21. World No 1 Hacker Software
22. Nsa Hack Tools
23. Free Pentest Tools For Windows
24. Hacker Techniques Tools And Incident Handling
25. Pentest Tools Website Vulnerability
26. Hacking Tools For Kali Linux
27. Pentest Tools Windows
28. Pentest Recon Tools
29. Pentest Tools Android
30. Pentest Tools Review
31. Hack Tools Mac
32. Hacking Tools Kit
33. Termux Hacking Tools 2019
34. Pentest Tools Nmap
35. Black Hat Hacker Tools
36. New Hack Tools
37. Hacking Tools
38. Hacker Tools Mac
39. Hacking Tools Github
40. Hacker Tools Mac
41. Hacker Tools Github
42. Hacking Tools 2020
43. Nsa Hack Tools
44. Pentest Tools Free
45. Physical Pentest Tools
46. Tools 4 Hack
47. Hacking Tools Hardware
48. Hack Tools Download
49. Pentest Tools Apk
50. Hacking Tools For Pc
51. Hacking Apps
52. Hacker Tools Mac
53. Hack Apps
54. Hacking Tools Online
55. Hack Tools For Games
56. Pentest Tools Port Scanner
57. Best Hacking Tools 2020
58. Hack Tools Download
59. Hacking Tools And Software
60. Easy Hack Tools
61. Hacker Tools Apk Download
62. Pentest Tools Android
63. Pentest Tools Download
64. World No 1 Hacker Software
65. Hacker Tools
66. Hack Tools Mac
67. Hacker Tools For Pc
68. Hacking Apps
69. Pentest Tools Kali Linux
70. Kik Hack Tools
71. Hacking Tools And Software
72. Beginner Hacker Tools
73. Hack Tools For Games
74. Hack Tools Mac
75. Hacker Tools For Pc
76. Hacking Tools
77. Pentest Tools For Ubuntu
78. Pentest Tools Free
79. Pentest Tools Port Scanner
80. Pentest Tools Nmap
81. Hacker Tools Free
82. Hacks And Tools
83. What Are Hacking Tools
84. Hacking Tools 2019
85. Pentest Tools Subdomain
86. Hack Tools
87. Black Hat Hacker Tools
88. Hack Tools Github
89. Pentest Tools For Windows
90. Install Pentest Tools Ubuntu
91. Wifi Hacker Tools For Windows
92. Nsa Hacker Tools
93. Hacker Tools Hardware
94. Bluetooth Hacking Tools Kali
95. Hacking Tools
96. Bluetooth Hacking Tools Kali
97. Pentest Tools Kali Linux
98. Pentest Box Tools Download
99. Hacker Hardware Tools
100. Bluetooth Hacking Tools Kali
101. Best Pentesting Tools 2018
102. Pentest Tools Tcp Port Scanner
103. Pentest Tools For Android
104. Best Pentesting Tools 2018
105. Hacking Tools For Beginners
106. Pentest Tools Review
107. How To Hack
108. Hackrf Tools
109. Pentest Tools Free
110. Hacking Tools Usb
111. Hacking Tools Online
112. Hacking Tools For Windows
113. Hack Apps
114. Top Pentest Tools
115. Hacking Tools For Games
116. Hacking Tools Download
117. Pentest Automation Tools
118. Hacker Tools Free
119. Hacking Tools Mac
120. Black Hat Hacker Tools
121. Free Pentest Tools For Windows
122. Pentest Tools Open Source
123. Pentest Tools Online
124. Pentest Tools Alternative
125. Hacker Tools For Pc
126. Hacking Tools Mac
127. Hacker Tools Online
128. Hacker Search Tools
129. Hacker Hardware Tools
130. Hacking Tools Windows
131. Tools 4 Hack
132. Hacker Tools Free Download
133. Beginner Hacker Tools
134. Hacker Tools List
135. Hacking Tools Software
136. Hacking Tools For Beginners
137. Tools Used For Hacking
138. Hacker
139. Pentest Tools Windows
140. Hak5 Tools
141. Pentest Tools Download
142. Pentest Box Tools Download
143. Best Hacking Tools 2020
144. Hacking Tools Free Download
145. Hacking Tools Online
146. Physical Pentest Tools
147. Hack App
148. Hacker Tools Software
149. Termux Hacking Tools 2019
150. Tools 4 Hack
151. Hack Tools
152. Pentest Tools
153. Tools For Hacker
154. Hacking Tools Name
155. Hacker Techniques Tools And Incident Handling
156. Hackers Toolbox
157. New Hack Tools
158. Tools Used For Hacking
159. Hacker Security Tools
160. Hak5 Tools
161. Tools For Hacker
162. Hacking Tools For Games
163. Hacking Tools For Pc
164. Hacking Tools Hardware
165. Hacking Tools Windows 10
166. Hacking Tools For Kali Linux
167. Hacking Tools And Software
168. How To Install Pentest Tools In Ubuntu
169. Hacker Hardware Tools
170. Termux Hacking Tools 2019
171. Hacking Tools For Beginners
172. Hackrf Tools
173. Hack Tools 2019
174. Hacker Tools Free
175. Hacker Tools List
176. Best Hacking Tools 2020
177. Hack Tools 2019
178. Best Hacking Tools 2020