Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages

A newly discovered vulnerability in Opera GX, the popular gaming-focused browser variant, has exposed how malicious actors could silently install browser modifications to harvest sensitive information from unsuspecting users visiting compromised websites. The flaw highlights the persistent security challenges facing specialized browsers that cater to specific communities, such as the gaming world, where users might prioritize performance features over security considerations.

Security researchers identified a critical weakness in Opera GX that enabled malicious websites to automatically install browser add-ons without user interaction or consent. Once installed, these rogue modifications could capture specific data from webpages visited by the victim. In a concerning proof of concept, researchers demonstrated they could reconstruct a complete Gmail address from a signed-in user with just a single visit to a malicious site, requiring no clicks or additional user actions. This type of attack vector is particularly dangerous as it operates silently and can extract valuable personal information without triggering typical security warnings that users might notice.

The vulnerability specifically affected users of Opera GX, putting the gaming community at particular risk. This demographic often shares personal information across gaming platforms, forums, and related services, making them potentially valuable targets for data harvesting campaigns