Security Surprises On Firefox Quantum

This morning I've found an scaring surprise on my Firefox Quantum. Casually it was connected to a proxy when an unexpected connection came up, the browser  was connecting to an unknown remote site via HTTP and downloading a ZIP that contains an ELF shared library, without any type of signature on it.

This means two things

1) the owner of that site might spread malware infecting many many people.
2) the ISP also might do that.


Ubuntu Version:

Firefox Quantum version:

The URL: hxxp://ciscobinary.openh264.org/openh264-linux64-0410d336bb748149a4f560eb6108090f078254b1.zip

The zip contains these two files:
  3f201a8984d6d765bc81966842294611  libgmpopenh264.so
  44aef3cd6b755fa5f6968725b67fd3b8  gmpopenh264.info

The info file:
  Name: gmpopenh264
  Description: GMP Plugin for OpenH264.
  Version: 1.6.0
  APIs: encode-video[h264], decode-video[h264]

So there is a remote codec loading system that is unsigned and unencrypted, I think is good to be aware of it.

In this case the shared library is a video decoder, but it would be a vector to distribute malware o spyware massively, or an attack vector for a MITM attacker.

Continue reading

1. Pentest Tools Url Fuzzer
2. Hackers Toolbox
3. Hacking Tools 2020
4. Pentest Tools Linux
5. Hacking Tools For Windows
6. What Is Hacking Tools
7. Pentest Tools Windows
8. Nsa Hack Tools
9. Pentest Tools Github
10. Hacking Tools Download
11. Hack Website Online Tool
12. Hack Tools
13. Pentest Tools Android
14. Bluetooth Hacking Tools Kali
15. Pentest Tools Port Scanner
16. Hacking Tools For Games
17. Pentest Recon Tools
18. Pentest Tools Open Source
19. Physical Pentest Tools
20. Best Pentesting Tools 2018
21. Hacker Hardware Tools
22. Game Hacking
23. Pentest Tools Nmap
24. Pentest Tools Website Vulnerability
25. How To Make Hacking Tools
26. Hacking Tools Github
27. Hacker Hardware Tools
28. Hack Tool Apk
29. Hack Tools Download
30. Hacker Tools List
31. Hacking Tools For Kali Linux
32. Hack Tools Online
33. Hacking Tools Github
34. Hacking Tools For Pc
35. Wifi Hacker Tools For Windows
36. Hack Tools For Ubuntu
37. What Are Hacking Tools
38. Hacking Tools For Windows 7
39. Hack Apps
40. Hacking Tools For Games
41. Hack And Tools
42. Hacking Tools Pc
43. Pentest Tools Framework
44. Hacker Tools Windows
45. Hack Tools Online
46. Pentest Tools Open Source
47. Hacking Tools Windows 10
48. Hacker Tools For Windows
49. Game Hacking
50. Pentest Automation Tools
51. Hackrf Tools
52. Hacker Tools For Ios
53. Hacking Tools Windows
54. Hacking Tools Online
55. Hacking Tools Windows
56. Pentest Tools Tcp Port Scanner
57. Hacking Tools Free Download
58. Black Hat Hacker Tools
59. Hacker Tools Apk
60. Hack Tools 2019
61. Hack Website Online Tool
62. Hacks And Tools
63. Pentest Tools For Ubuntu
64. Hacking Tools For Windows
65. Pentest Tools Nmap
66. Hacker Tools Github
67. Pentest Tools Nmap
68. Tools For Hacker
69. Pentest Tools Subdomain
70. Hack Tools Download
71. Pentest Tools Url Fuzzer
72. Hacking Tools For Kali Linux
73. Hacker Tools Free Download
74. Hack And Tools
75. Hacking Tools Hardware
76. Hacking Tools Github
77. Hacking Tools For Beginners
78. Hackers Toolbox
79. Pentest Tools For Ubuntu
80. Hacking Tools Mac
81. Hack Tools 2019
82. Pentest Tools Apk
83. Hack Tools
84. Hacking Tools Software
85. Pentest Tools Online
86. Hacking Tools And Software
87. Hacking Tools For Windows Free Download
88. Tools Used For Hacking
89. Pentest Tools Nmap
90. Pentest Recon Tools
91. Pentest Tools Windows
92. Hak5 Tools
93. Nsa Hack Tools Download
94. Hack Tools 2019
95. Pentest Tools Tcp Port Scanner
96. Hacking Tools Free Download
97. Pentest Tools Open Source
98. Hack Tools
99. Physical Pentest Tools
100. Hack Tools Github
101. Hacker Techniques Tools And Incident Handling
102. Hacker Tool Kit
103. Hack App
104. Hack Tools For Pc
105. Pentest Tools Alternative
106. Pentest Tools For Windows
107. Pentest Tools Linux
108. Hacker
109. Hacking Tools Github
110. Pentest Tools Tcp Port Scanner
111. Hack Tools Download
112. Hacking Tools 2019
113. Hack App
114. Pentest Tools For Mac
115. Wifi Hacker Tools For Windows
116. Hack Tools Pc
117. Hacker Tools Apk Download
118. Hacker Security Tools
119. Hacker Search Tools
120. Termux Hacking Tools 2019
121. Hacker Tools List
122. Hacker Security Tools
123. Install Pentest Tools Ubuntu
124. Hack Tool Apk
125. Hack Tools For Ubuntu
126. Pentest Tools Open Source
127. Pentest Tools List
128. Hacking Tools Online
129. Hacker Techniques Tools And Incident Handling
130. Hack Tools
131. Pentest Tools Android
132. Pentest Tools Framework
133. Hack Tools
134. Hacking Tools 2020
135. Tools Used For Hacking
136. Physical Pentest Tools
137. Pentest Reporting Tools
138. Black Hat Hacker Tools
139. Install Pentest Tools Ubuntu
140. Pentest Tools Apk
141. Hack Tool Apk
142. Pentest Tools Port Scanner
143. Tools Used For Hacking
144. Computer Hacker
145. Hacking Tools Github
146. Pentest Tools Nmap
147. Hacker Tools Linux
148. Hacker Tools Apk
149. Hacker Tools Windows
150. How To Install Pentest Tools In Ubuntu
151. Hacker Hardware Tools
152. Pentest Recon Tools
153. Hacker Tools Windows
154. Hack Tools
155. Hacker Tools Apk
156. Hacking Tools Hardware
157. Hack Tools Mac
158. Hacker Search Tools
159. Game Hacking
160. Easy Hack Tools