Malicious actors could have compromised the Opera browser’s private APIs through a malicious extension on the Chrome Web Store exploiting a recently addressed vulnerability as part of the CrossBarking attack, The Hacker News reports. Included within the extension were content scripts that could be leveraged to compromise Opera’s overly permissive domains, secure API access, capture open tab screenshots, obtain session cookies, and alter DNS-over-HTTPS settings, which could be followed by adversary-in-the-middle intrusions, according to a study from Guardio Labs.

Source: SC Magazine