Opera Browser Breached - Update Available

[Corrine]

Snippets from Opera breached, has code cert stolen, possibly spreads malware – advice on what to do | Naked Security:

This quoted from Opera's statement:

It is possible that a few thousand Windows users, who were using Opera between 01.00 and 01.36 UTC on June 19th, may automatically have received and installed the malicious software. To be on the safe side, we will roll out a new version of Opera which will use a new code signing certificate.

Good advice:

So, if you are an Opera for Windows user:

• Download a fresh copy of the latest version (since the buggy download appears to be a thing of the past).
• Make sure your anti-virus is up to date.
• If you can spare the time, do an on-demand ("scan now") check of your computer.

Download: Opera browser - The alternative web browser - Download free

 

[x BlueRobot]

Thanks for posting this, I'm going to download the new version of Opera now. I think it's 12.15.

I haven't noticed anything strange going on my computer since June 19th, but I'm going to run a scan with Malwarebytes.

 

[Corrine]

You're welcome, but it gets worse!

Fake Opera Browser Update Distributes Ransomware | Malwarebytes Unpacked

The hackers breached the company’s network and used one of its code-signing certificate (an older and expired one mind you) to digitally sign a piece of malware and package it as an update for the Opera browser.

While it is not entirely clear what happened, it would appear as though the bad guys went as far as pushing the update for a 36-minute period, meaning they had access to Opera’s infrastructure during that time.