Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

More info

1. Hacking App
2. Best Hacking Tools 2019
3. How To Install Pentest Tools In Ubuntu
4. Growth Hacker Tools
5. Pentest Tools Github
6. Hacking Tools Name
7. Pentest Tools For Windows
8. Pentest Tools Nmap
9. Pentest Tools Free
10. What Are Hacking Tools
11. Hacking Tools For Games
12. Pentest Box Tools Download
13. Hacker Tools Apk
14. Nsa Hack Tools Download
15. Pentest Automation Tools
16. Hack Tool Apk
17. Hacker Tools Apk Download
18. Pentest Tools Nmap
19. Bluetooth Hacking Tools Kali
20. Pentest Tools Windows
21. Black Hat Hacker Tools
22. Hacking Tools For Beginners
23. Hacker Tools Hardware
24. Pentest Tools List
25. Easy Hack Tools
26. Pentest Automation Tools
27. Hacker Tools Software
28. Pentest Tools Online
29. Hacker
30. Pentest Tools Free
31. Hacking Tools Usb
32. Tools For Hacker
33. Hacker Tools For Pc
34. Hacker Tools Apk Download
35. Hacking Apps
36. Hacking Tools And Software
37. Hacking Tools For Windows 7
38. Hacker Tools Free Download
39. Hacking App
40. Nsa Hack Tools
41. Hacks And Tools
42. Hack Tools For Windows
43. Hacking Tools Software
44. Pentest Tools For Android
45. Nsa Hack Tools
46. Hacker Tools Windows
47. Hacker Tools 2019
48. Hacking Tools And Software
49. Pentest Tools Port Scanner
50. Hack Tools
51. Pentest Tools Tcp Port Scanner
52. Pentest Tools Nmap
53. Hacker Tools 2020