More specifically, a backdoor that allows the receiving and processing of remote command & control commands.įigure 2: Screenshot of the Cisco’s notification date for AvastĪs a result, the CCleaner version released on August 15th, 2017 presented risks of infection for an unprecedented number of computers (including those that run on critical infrastructures) and enormous potential damage to software users across the world.
Sadly, Cisco’s Talos Intelligence Group recently discovered that CCleaner version 5.33 contained malware attached to it. This is usually very effective as it is based on the trust created between the software developer and the end-user.Īn example of this is the worm Nyetya, that recently re-coined the term ‘ransomware’ using proof of concept network level spreading behavior.Īccording to the developers of CCleaner, more than 2 billion downloads had been registered by November 2016 and a growth rate of approximately 5 million downloads per week for its flagship product.įigure 1: CCleaner growth statistics CCleaner malware – a ‘numbers game’Īs recent events show, these look like just the numbers needed for a motivated malware developer / advanced attacker to step in and take control of the software distribution network. One way to distribute malware to different organisations is through software supply chains. Why was CCleaner used to distribute malware? For this reason, we should look at this event with humbleness and regard it as a good motivation to increase our awareness regarding the security of the software that we use.
While editing this blog post, I aim to provide an as unbiased point of view as possible, considering that this website also serves a PC System Utilities software product to its audience. Update for customers asking about CCleaner malware:it seems that malicious software has been discovered as being distributed alongside CCleaner between August 15th, 2017 – September 13th, 2017.
0 kommentar(er)
