Hackers breached the Opera Internal network infrastructure and managed to compromise expired Opera code signing certificate.
The cybercriminals used the certificate to sing their malware and distributed the malicious software to thousands of Opera users through automated update function.
The malware is currently detected by half of the antivirus engines used by the virus total scanner. According to VirusTotal report, the malware appears to be the Zeus Trojan.
The cybercriminals used the certificate to sing their malware and distributed the malicious software to thousands of Opera users through automated update function.
The malware is currently detected by half of the antivirus engines used by the virus total scanner. According to VirusTotal report, the malware appears to be the Zeus Trojan.
The malware is able to steal stored credentials from browsers including Opera, Thunderbird, Chrome, Firefox, FileZilla, according to Avira malware report. It also downloads additional malware files.
Opera users are advised to update to the latest version of Opera as soon as it is released.
According to the official blog post, the organization come to know about the security breach on June 19th. The company claimed that their systems have been cleaned and there is no evidence of user data have been compromised
Comments
Post a Comment