Hackers hid malware in official CCleaner app and millions are at risk
CCleaner, a popular Windows app for system optimization and maintenance, has at some point been hijacked by hackers, potentially tricking millions of people into installing malware on their personal computers.
The threat was discovered by security researchers at Cisco Talos, who noticed that CCleaner was triggering their malware protection systems on Sept. 13. After looking into the problem, they realized that CCleaner version 5.33 came together with dangerous malware.
To make matters worse, we're not talking about downloading the app on some shady third-party site. Users who downloaded CCleaner directly from the official site, as recently as Sept. 11, were in fact downloading the infected version of the software.
SEE ALSO:Beware, Google Play Store gets caught distributing malwareAccording to Cisco Talos, only version 5.33 of the software is affected, and the more recent 5.34 version of CCleaner is malware-free. The malware doesn't do much damage by itself, but opens up the possibility for hackers to remotely install other malware, with potentially devastating consequences.
This was confirmed by the app's maker, Piriform, which was acquired by anti-virus software maker Avast in July. In a blog post, the company's VP of Products Paul Yung said that another one of it software products, CCleaner Cloud (version 1.07.3191), has also been affected.
These two apps were "illegally modified before (they were) released to the public," the post said. "The threat has now been resolved in the sense that the rogue server is down, other potential servers are out of the control of the attacker and we’re moving all existing CCleaner v5.33.6162 users to the latest version. Users of CCleaner Cloud version 1.07.3191 have received an automatic update."
UPDATE: Sept. 19, 2017, 9:31 a.m. UTC According to Piriform, only 32-bit versions of the software are affected.
It's currently unknown who's behind the hack, or how they managed to sneak malware into official CCleaner installs. "At this stage, we don’t want to speculate how the unauthorized code appeared in the CCleaner software, where the attack originated from, how long it was being prepared and who stood behind it," Yung said.
The CCleaner app is very popular -- Piriform claimed 2 billion CCleaner downloads and 5 million desktop installs weekly as of Nov. 2016. The infected version of the software was released on Aug. 15, meaning that millions of users are potentially at risk.
While Piriform claims that it was "able to disarm the threat before it was able to do any harm," it's unclear whether this is really the case. Users who'd had undetected malware on their computers for (potentially) a month could've had their data stolen or their systems compromised in other ways.
Unfortunately, there's very little users could've done to prevent this from happening, as the malware came with an official app, hosted on an official server. Everyone who installed CCleaner in the period from August 15 until now should update to the newest version of the software and run an anti-malware scan.
Featured Video For You
Sticker photos that come to life might just be cooler than instant film
相关文章
Yes, big spiders are spreading in the U.S. No, they're not flying.
They're not after you. And they don't "parachute" from the sky.Periodically, people and headlines on2024-09-21S. Korea bans poultry imports from Netherlands after bird flu outbreak
Disinfection measurements in poultry farms located in Yongin, Gyeonggi Province on Thursday.(Yonhap)2024-09-21North Korean media underscore 'mutual respect' in international relations
U.S. President Donald Trump and North Korean leader Kim Jong-un / APNorth Korea's state media on Sun2024-09-21Desperate Coinbase customers turn to SEC with allegations of fraud
Life savings lost. Desperate cries for help. Allegations of fraud.In the six years since its foundin2024-09-2121 Unexpected Wonders in Colorado’s Vibrant Cities and Small Towns
Between Colorado’s storied ranges, folded into its valleys and sprinkled across its plains, you’ll f2024-09-21The Trump voter fraud agenda has arrived in New Hampshire.
New Hampshire residents who register to vote within 30 days of an election may soon find an unexpect2024-09-21
最新评论