Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

More info

1. Computer Hacker
2. Hacker Tool Kit
3. Hacker Techniques Tools And Incident Handling
4. Nsa Hack Tools
5. Hacking Tools Pc
6. Pentest Tools Apk
7. Hak5 Tools
8. Pentest Box Tools Download
9. Hacker Tool Kit
10. Hack Tools For Pc
11. Hackers Toolbox
12. What Are Hacking Tools
13. Underground Hacker Sites
14. Hacking Tools For Beginners
15. Hacker Tools For Windows
16. Hack Tools Github
17. Tools 4 Hack
18. Pentest Tools For Windows
19. Github Hacking Tools
20. Hacking Tools For Kali Linux
21. Hack Tool Apk
22. Hack App
23. Blackhat Hacker Tools
24. How To Install Pentest Tools In Ubuntu
25. Pentest Tools Linux
26. Pentest Tools Nmap
27. Best Pentesting Tools 2018
28. Hacker Tools Free
29. Hacking Tools Windows 10
30. Hacker Tools Software
31. Pentest Tools Kali Linux
32. Hacker Tools Free
33. Pentest Tools Apk
34. Pentest Tools Subdomain
35. How To Hack
36. Hacking Tools Free Download
37. Pentest Tools Windows
38. Pentest Tools For Windows
39. Hack Tools
40. Hack Tool Apk No Root
41. Pentest Tools
42. Pentest Tools Kali Linux
43. Hack Tools Download
44. Tools 4 Hack
45. Hacking Tools For Beginners
46. Hack Tools For Windows
47. Hack Tools For Mac
48. Pentest Tools Find Subdomains
49. Hack Tools Github
50. Pentest Tools Kali Linux
51. Hack App
52. Pentest Tools Tcp Port Scanner
53. Physical Pentest Tools
54. Pentest Tools Android
55. Hacking Tools Name
56. Bluetooth Hacking Tools Kali
57. Pentest Automation Tools
58. Hack Tools For Games
59. Hacking Tools
60. Hacking Tools
61. Hacking Tools For Mac
62. Usb Pentest Tools
63. Hacking Tools For Games
64. Hacker Tools Free Download
65. Hacking Tools Hardware
66. Hack Tools For Ubuntu
67. Hacker Hardware Tools
68. Hacks And Tools
69. Hack And Tools
70. Hacking Tools Windows
71. Free Pentest Tools For Windows
72. Hacking Tools Windows
73. New Hack Tools
74. Hack Tools For Games
75. Pentest Tools Download
76. How To Install Pentest Tools In Ubuntu
77. Hacker Tools For Ios
78. Hack Tools For Mac
79. Hacking Tools And Software
80. Hacker Tools Mac
81. Nsa Hack Tools Download
82. Hacking Tools Name
83. Hacker Techniques Tools And Incident Handling
84. Pentest Tools Alternative
85. What Are Hacking Tools
86. Hacking Tools For Windows 7
87. Pentest Tools For Android
88. Hacker Search Tools
89. Pentest Tools For Ubuntu
90. Hack Tools Download
91. Hack Tools Download
92. Hacker Tools Software
93. Hacking Tools For Beginners
94. Physical Pentest Tools
95. Hacker Tools For Pc
96. Growth Hacker Tools
97. Pentest Tools Alternative
98. World No 1 Hacker Software
99. Hack Tools
100. Hacker Tools For Ios
101. Hack Tools For Windows
102. Bluetooth Hacking Tools Kali
103. Hacker Security Tools
104. Computer Hacker
105. Hacking Tools Mac
106. Hacking Tools And Software
107. Pentest Reporting Tools
108. How To Install Pentest Tools In Ubuntu
109. Usb Pentest Tools
110. Hack Tool Apk No Root
111. World No 1 Hacker Software
112. Hacker Tool Kit
113. Pentest Automation Tools
114. Pentest Tools Website
115. Hacking Tools Windows 10
116. Pentest Tools Bluekeep
117. Hacker Tools Github
118. Hacking Tools For Pc
119. How To Make Hacking Tools
120. Hacking Tools Github
121. Pentest Tools Port Scanner
122. Underground Hacker Sites
123. Hack Tools 2019
124. Hacker Tools Free Download
125. Nsa Hack Tools Download
126. Hack App
127. Hacker Tools Hardware
128. Hack Tools 2019
129. Physical Pentest Tools
130. Hacker Tools Free
131. Install Pentest Tools Ubuntu
132. Pentest Tools Windows
133. Hacking Tools Pc
134. Hacking Tools Software
135. Hak5 Tools
136. Pentest Tools Linux
137. Growth Hacker Tools
138. Hacker Tools Software
139. Hack Tools Github
140. Hacking Tools 2019
141. Hack Tools Pc
142. Hacking Tools For Windows Free Download
143. Hacking Tools For Mac
144. Hacking Tools For Windows
145. Hack Tool Apk No Root
146. Hack Tools 2019
147. Pentest Tools Bluekeep
148. Tools 4 Hack
149. Termux Hacking Tools 2019
150. Hack Tools For Mac
151. Hacker Tools Mac
152. Easy Hack Tools
153. Hacker
154. Hacking Tools Kit
155. Pentest Tools For Mac
156. Hacking Tools For Games
157. Top Pentest Tools
158. Top Pentest Tools
159. Hack Tools For Pc
160. Best Pentesting Tools 2018
161. Hacker Tool Kit
162. Hacking Tools For Windows Free Download
163. Game Hacking
164. Pentest Tools For Mac
165. What Are Hacking Tools
166. Hacker
167. Hacker Techniques Tools And Incident Handling
168. Beginner Hacker Tools
169. Hacking Tools For Beginners
170. Hacker Hardware Tools
171. Hacker Tools Apk
172. Tools 4 Hack
173. Hacking Tools Download
174. Hack Tools For Ubuntu
175. Pentest Tools List
176. Tools 4 Hack