Ccleaner is one of the best cleaning apps for Windows computers. However, it looks like the popular Windows junk file cleaner Ccleaner has been hacked and malware injected into version 5.33 (and probably 5.34) which has been distributed to millions of users.
This is an unusual attack as software similar to CCleaner is trusted by consumers and meant to remove “crapware” from a system. “By exploiting the trust relationship between software vendors and the users of their software, attackers can benefit from users’ inherent trust in the files and web servers used to distribute updates,” says Talos. The malware itself appears to have been designed to use infected PCs as part of a botnet.
Earlier this year, Ukrainian company MeDoc was breached and its update servers used to distribute the Petya ransomware. Hackers appear to be targeting these types of distribution points to more easily spread malware, instead of the traditional way of attacking individual machines themselves. It’s a trend that many security researches will be monitoring closely, to catch the latest innovative ways that hackers are breaching multiple systems.
To fix Ccleaner infected PCs, please read this article.
Sources: TheVerge, Avast