Opera Browser Breached - Update Available

Started by Corrine, June 27, 2013, 12:53:45 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Corrine

Snippets from Opera breached, has code cert stolen, possibly spreads malware – advice on what to do | Naked Security:

This quoted from Opera's statement:

QuoteIt is possible that a few thousand Windows users, who were using Opera between 01.00 and 01.36 UTC on June 19th, may automatically have received and installed the malicious software. To be on the safe side, we will roll out a new version of Opera which will use a new code signing certificate.

Good advice:

Quote
So, if you are an Opera for Windows user:

  • Download a fresh copy of the latest version (since the buggy download appears to be a thing of the past).
  • Make sure your anti-virus is up to date.
  • If you can spare the time, do an on-demand ("scan now") check of your computer.

Download:  http://www.opera.com/


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Corrine

It gets worse! 

Fake Opera Browser Update Distributes Ransomware | Malwarebytes Unpacked

QuoteThe hackers breached the company's network and used one of its code-signing certificate (an older and expired one mind you) to digitally sign a piece of malware and package it as an update for the Opera browser.

While it is not entirely clear what happened, it would appear as though the bad guys went as far as pushing the update for a 36-minute period, meaning they had access to Opera's infrastructure during that time.

If anyone here was infected and would like logs reviewed, please provide a copy of the logs in the Log Posting Instructions topic for assistance.


Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

ky331

The following information has been copied/pasted from http://www.opera.com/docs/changelogs/unified/1500/


Opera 15.00
Release notes

Release date: 2013-07-02

Fixes and stability enhancements since the Opera 12 series

General and User Interface

    Opera 15 is a major reinvention for Opera. Going forward, the browser's source code will be based on Chromium and Blink, a fork of the WebKit rendering engine.
     
    Everything for this browser is new:

        New rendering engine based on WebKit
        New user interface
        New capabilities
        New features
        Improved site compatibility
        Silent auto updates

    As Opera has recreated its desktop browser, features will be introduced selectively and iteratively.

New features

Combined address and search bar

    Opera 15 combines the address and search bar, allowing for multiple predictive results that can be filtered by search engine. This bar includes options for adding current pages to Opera's Speed Dial or Stash, and expandable page information.

Enhanced Speed Dial

    Opera 15 allows you to combine Speed Dial entries into groups, and introduces a search function that filters through entries.

Stash

    Opera 15 introduces Stash - a feature that records the location, meta data, and a screenshot of a page. It places this information into a collapsable list entry on the browser's Start Page, that can be searched by keyword and/or scanned visually by screenshot.

Discover

    A recommender service is included with Opera 15. Discover displays news and topical content that can be filtered by category or location/language.

Off-Road mode

    Opera 15 adopts the server-side compression technology used by Opera Mobile.

Improvements since Opera 15 Next (initial channel release)

    Stability enhancements
    Reintroduction of mouse gestures
    Improved address field behavior
    Improved proxy support
    Performance improvement for retina display on Mac
    Support for 64-bit versions of Windows Vista and XP
    Support for migrating Opera 12 profile data; see the help pages