Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Related posts

1. Android Hack Tools Github
2. Usb Pentest Tools
3. Android Hack Tools Github
4. How To Hack
5. Best Hacking Tools 2020
6. Pentest Tools Nmap
7. Hacking Tools Pc
8. Hacker Tools Apk Download
9. Hacking Tools For Windows 7
10. Hacker Search Tools
11. Hacking Tools Github
12. Hacker Tools For Ios
13. Pentest Tools Download
14. Pentest Tools Framework
15. Hacking Tools 2019
16. Hacking Tools
17. What Is Hacking Tools
18. Easy Hack Tools
19. Pentest Tools Kali Linux
20. Hak5 Tools
21. Blackhat Hacker Tools
22. Hacker Tools 2019
23. Pentest Tools Online
24. Hack Tools Mac
25. Hack Tools For Ubuntu
26. Hack Apps
27. Hack Tools
28. Pentest Automation Tools
29. Hacker
30. Hak5 Tools
31. Hack Tools Github
32. Tools For Hacker
33. Hacking Tools And Software
34. Hack Tools Pc
35. Hack Tool Apk No Root
36. Best Hacking Tools 2019
37. Pentest Tools Windows
38. Hacking Tools Github
39. Pentest Tools Github
40. Blackhat Hacker Tools
41. Physical Pentest Tools
42. Hacking Tools Mac
43. Hacker Tools 2019
44. Pentest Tools Find Subdomains
45. Pentest Tools Bluekeep
46. Hacker Tools Hardware
47. Pentest Tools For Android
48. Tools 4 Hack
49. Hacking Tools Software
50. Hacking Tools Windows
51. Hacker Tool Kit
52. Hack Apps
53. Pentest Tools Online
54. Hacker Tools
55. Hacks And Tools
56. Install Pentest Tools Ubuntu
57. Pentest Tools Framework
58. Hacking Tools For Pc
59. Hack Tools For Ubuntu
60. Hackers Toolbox
61. Github Hacking Tools
62. Hack Tools Online
63. Pentest Automation Tools
64. Hacking Tools Software
65. Hack Tools 2019
66. Hacking Tools For Windows Free Download
67. Pentest Tools
68. Best Hacking Tools 2020
69. Pentest Tools Review
70. Hacking Tools Software
71. Pentest Tools Website Vulnerability
72. Pentest Tools Open Source
73. Beginner Hacker Tools
74. Hacking Apps
75. Hack Tools
76. Hacking Tools For Beginners
77. Beginner Hacker Tools
78. Blackhat Hacker Tools
79. Pentest Tools Url Fuzzer
80. Pentest Tools Open Source
81. Hacking Tools Usb
82. Hack Tools
83. Hacking App
84. Pentest Tools Alternative
85. Hacking Tools Pc
86. Black Hat Hacker Tools
87. Hacking Tools Free Download
88. Pentest Reporting Tools
89. Hacker Tools Free
90. Pentest Tools Alternative
91. Hack Tools
92. Top Pentest Tools
93. Ethical Hacker Tools
94. Hacking Tools For Beginners
95. Hacker Tools For Mac
96. Hacker Tools Mac
97. Pentest Tools Nmap
98. Hackers Toolbox
99. Hacker Tools
100. Hacker Tools Software
101. Pentest Tools
102. Hack Tools Pc
103. Hacker
104. Best Hacking Tools 2019
105. Hacking Tools Hardware
106. Hacker Search Tools
107. Pentest Tools Windows
108. Hack Tools For Ubuntu
109. Termux Hacking Tools 2019
110. What Are Hacking Tools
111. Pentest Tools Windows
112. Hacking Tools For Kali Linux
113. Hacking Tools Usb
114. Hack Tool Apk No Root
115. Hacking Tools Download
116. Pentest Box Tools Download
117. Growth Hacker Tools
118. Hack Tools Pc
119. Hacking Tools For Windows 7
120. Hack And Tools
121. Android Hack Tools Github
122. Hacker Tools Mac
123. Ethical Hacker Tools
124. Computer Hacker
125. Hacking Tools Download
126. Hacking Tools For Pc
127. Pentest Tools Kali Linux
128. Hacker Tool Kit
129. Hacker
130. Tools Used For Hacking
131. Hacker Techniques Tools And Incident Handling
132. Pentest Tools Port Scanner
133. Usb Pentest Tools
134. Pentest Tools Alternative
135. Hacking Tools For Windows 7
136. Pentest Tools Framework
137. Hacking Apps
138. Underground Hacker Sites
139. Pentest Tools Find Subdomains
140. Hack Tools Github
141. Hacking Tools For Games
142. Beginner Hacker Tools
143. Pentest Tools Download
144. Growth Hacker Tools
145. Underground Hacker Sites
146. Pentest Tools For Ubuntu
147. Hacking Tools Kit
148. Hacker Tools Linux
149. Hacking Tools Windows 10
150. Hacking Tools For Windows 7
151. Hack Tools For Ubuntu
152. Bluetooth Hacking Tools Kali
153. Hacker Security Tools
154. How To Install Pentest Tools In Ubuntu
155. Hacker Techniques Tools And Incident Handling
156. Hack Tools Mac
157. Hacking Tools Download
158. Free Pentest Tools For Windows
159. Hack Tools Mac
160. Pentest Tools For Android
161. Underground Hacker Sites
162. Pentest Tools Bluekeep
163. Hacker Tools Free
164. Hacker Tools For Ios
165. Hacking Tools For Windows 7
166. Hack Tools Online
167. Pentest Tools Download
168. Hack Tools Download
169. Game Hacking
170. Hacking Tools For Windows 7
171. Pentest Tools Linux
172. Hack Website Online Tool
173. Hacking Tools Github
174. Hack Tools 2019
175. Hacker Tools Apk