Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Related news

1. Hack Tools Pc
2. Hackers Toolbox
3. Best Hacking Tools 2019
4. Hacking Tools Kit
5. Hacking Tools For Kali Linux
6. Hacking Tools Download
7. Hacking Tools Name
8. Pentest Tools Subdomain
9. Wifi Hacker Tools For Windows
10. Hacker Tools For Ios
11. Hacker Tool Kit
12. Hack Tools For Games
13. Hacker Techniques Tools And Incident Handling
14. Hacker Tools Free Download
15. Hacker Tools Mac
16. Wifi Hacker Tools For Windows
17. Pentest Tools Find Subdomains
18. Kik Hack Tools
19. Hak5 Tools
20. Hacking Tools For Pc
21. Hacking Tools For Beginners
22. Pentest Reporting Tools
23. Wifi Hacker Tools For Windows
24. Best Hacking Tools 2019
25. Hacker Tools Software
26. Hacker Hardware Tools
27. Pentest Tools Subdomain
28. Hack Rom Tools
29. Pentest Tools Linux
30. Hacker Tools Online
31. Hacking Tools Windows 10
32. Hack Tools 2019
33. Hacker Tools Mac
34. Beginner Hacker Tools
35. Hackers Toolbox
36. Pentest Tools Kali Linux
37. Hacking Tools Hardware
38. Hack Tools For Mac
39. Hack Tools
40. Hack Rom Tools
41. Pentest Tools Linux
42. Black Hat Hacker Tools
43. Hacker Security Tools
44. Hacking App
45. Hacker Tools 2019
46. Hacking Tools 2019
47. Hacker Tools For Pc
48. Hacker Tools List
49. Hacker Tools 2019
50. Hacking Tools For Kali Linux
51. Pentest Automation Tools
52. Install Pentest Tools Ubuntu
53. Pentest Tools Find Subdomains
54. Hack Tools Online
55. How To Hack
56. Pentest Tools Subdomain
57. Top Pentest Tools
58. Hacking Tools 2019
59. Hacking Tools Free Download
60. Pentest Tools
61. Pentest Tools Subdomain
62. Bluetooth Hacking Tools Kali
63. Hacker Tools Apk
64. Hacking Tools Name
65. Hack Tools Github
66. Black Hat Hacker Tools
67. Bluetooth Hacking Tools Kali
68. Pentest Tools Website Vulnerability
69. Nsa Hack Tools Download
70. Hack Tools Pc
71. Top Pentest Tools
72. Pentest Tools Bluekeep
73. Hack Tools Mac
74. Hacking App
75. Pentest Tools Online
76. Hacker Tools Windows
77. Hack Tools 2019
78. Nsa Hack Tools Download
79. Hack Tools Mac
80. Hacker Tools