Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

More info

• Hacker Tools Linux
• Pentest Tools Apk
• Hacker Security Tools
• Hacking Tools Free Download
• World No 1 Hacker Software
• Pentest Tools For Windows
• Hacking Tools Free Download
• Hacking Tools For Windows
• New Hacker Tools
• Pentest Recon Tools
• Black Hat Hacker Tools
• Pentest Tools Port Scanner
• World No 1 Hacker Software
• What Is Hacking Tools
• Pentest Tools Online
• Hack Tools Pc
• Kik Hack Tools
• Pentest Tools Free
• Hacker Techniques Tools And Incident Handling
• Blackhat Hacker Tools
• Hacking App
• Game Hacking
• Growth Hacker Tools
• Hacking Tools Hardware
• Hacking Tools For Beginners
• Hacker Tools For Ios
• Pentest Tools Website Vulnerability
• Hacker Tools 2019
• Pentest Box Tools Download
• Hacking Tools Github
• Hacking Tools For Windows Free Download
• Nsa Hack Tools Download
• Pentest Tools
• Hack Tool Apk No Root
• Hack And Tools
• Pentest Recon Tools
• Bluetooth Hacking Tools Kali
• Pentest Tools Windows
• Hack Apps
• Easy Hack Tools
• World No 1 Hacker Software
• Pentest Tools Url Fuzzer
• New Hacker Tools
• Nsa Hack Tools
• Termux Hacking Tools 2019
• Free Pentest Tools For Windows
• Hacks And Tools
• Pentest Tools Open Source
• Tools Used For Hacking
• Hack Rom Tools
• Underground Hacker Sites
• Hacker Tools For Pc
• Hack App