Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

More info

1. Pentest Tools Url Fuzzer
2. Pentest Tools Download
3. Pentest Tools Github
4. Hack Website Online Tool
5. Hack Tools Mac
6. Hacker Tools
7. Hacker Security Tools
8. Pentest Tools For Android
9. Hack Tools 2019
10. New Hacker Tools
11. Pentest Tools Android
12. Hacking Tools Download
13. Hacking Tools Name
14. How To Hack
15. Pentest Tools Subdomain
16. Hack Tools Github
17. Pentest Tools For Ubuntu
18. Hacker Tools Apk Download
19. Hack Apps
20. Hacker Tools For Pc
21. How To Hack
22. Pentest Tools For Android
23. Hacking Tools For Games
24. Pentest Tools Open Source
25. Hacking Tools Hardware
26. Pentest Tools List
27. Hackrf Tools
28. Hack Tools Pc
29. Hacker Tools For Pc
30. Hacking Tools Pc
31. Hack Tools For Games
32. Hacking Tools Usb
33. Hacker Tools Free
34. Hack Tools
35. Hack Tools For Windows
36. Pentest Tools Review
37. Hack Tools
38. Hacker Tools List
39. Hacker
40. Github Hacking Tools
41. Android Hack Tools Github
42. Termux Hacking Tools 2019
43. Pentest Tools Github
44. Pentest Recon Tools
45. New Hack Tools
46. Pentest Tools For Windows
47. Hack Tool Apk
48. Computer Hacker
49. Top Pentest Tools
50. Hacking Tools For Games
51. Tools For Hacker
52. Hacker Tools Linux
53. Hacker Tools Free
54. Hacking Tools Usb
55. Hack Tools Online
56. Nsa Hack Tools Download
57. Pentest Tools For Ubuntu
58. Hacker Tools 2019
59. Game Hacking
60. Hacker Tools For Pc
61. Pentest Tools Windows
62. Pentest Tools Tcp Port Scanner
63. Pentest Recon Tools
64. Hacker Tools For Pc
65. Hacking Tools
66. Pentest Tools For Ubuntu
67. Hacking Apps
68. Hacker Tools 2020
69. Hacker Tools Hardware
70. Hacker Tools For Mac
71. Underground Hacker Sites
72. Hacking Tools Name
73. Hacker Tools 2020
74. Free Pentest Tools For Windows
75. Hacker Tools Apk Download
76. Tools 4 Hack
77. Hacking Tools Software
78. Hacker Tools Hardware
79. Hacking App
80. Hack Rom Tools
81. Pentest Automation Tools
82. Hacker Tools 2019
83. Pentest Tools For Mac
84. Hacker Search Tools
85. Hacking Tools Windows
86. Pentest Tools Review
87. Hacking Tools For Beginners
88. Pentest Tools Alternative
89. Hacking Tools Download
90. Hack Website Online Tool
91. Hacking Tools 2020
92. Pentest Tools Url Fuzzer
93. Pentest Tools Website
94. Pentest Tools For Ubuntu
95. Pentest Tools Find Subdomains
96. Hack And Tools
97. Hacking Tools Windows
98. Hacking Tools Name
99. Computer Hacker
100. Hack App
101. Hacker Tools 2019
102. Hack Tool Apk
103. Hacker Security Tools
104. Kik Hack Tools
105. Hacker
106. Hacking Tools For Beginners
107. Pentest Tools Windows
108. Beginner Hacker Tools
109. Pentest Tools Free
110. Hacking Tools Mac
111. New Hack Tools
112. Pentest Tools
113. Hacker Tools
114. Hack Tools Download
115. Hacking Tools Download
116. Hacker Tools Windows
117. Growth Hacker Tools
118. Hacking Tools For Windows 7
119. Free Pentest Tools For Windows
120. Pentest Tools For Windows
121. Pentest Tools Port Scanner
122. Hacks And Tools
123. Hacking Tools For Beginners
124. Blackhat Hacker Tools
125. Hack Tools For Games
126. Hacker Search Tools
127. Pentest Tools Website
128. Hacking Tools For Windows 7
129. Hacker Techniques Tools And Incident Handling
130. Pentest Tools Open Source
131. Hacker Tools Hardware
132. Kik Hack Tools
133. Pentest Tools For Windows
134. Nsa Hack Tools Download
135. Hacker Tools
136. Pentest Tools Online
137. Pentest Tools Tcp Port Scanner
138. What Are Hacking Tools
139. Top Pentest Tools
140. Hacker Security Tools
141. Nsa Hack Tools
142. Hacker Tools List
143. Hacker Tools For Ios
144. Hacker Tools Free
145. Hacker Tools Linux
146. Physical Pentest Tools
147. Pentest Tools Subdomain
148. Hackrf Tools
149. Black Hat Hacker Tools
150. Free Pentest Tools For Windows
151. Hacker Tools Github
152. Ethical Hacker Tools
153. What Are Hacking Tools
154. Hack Tools 2019
155. Hacker Tools Github
156. Hack Tools 2019
157. Top Pentest Tools
158. Pentest Tools For Windows
159. Pentest Tools Apk
160. Hacker Tools
161. Hacker Tools