PSA for CCleaner users!!
Hackers Hid Backdoor In CCleaner Security App With 2 Billion Downloads -- 2.3 Million Infected
Read more:
https://www.forbes.com/sites/thomasbrewster/2017/09/18/ccleaner-cybersecurity-app-inf...
Forum Discussion
Wow! I got really nervous as I have CCleaner on all three of my machines, and they all had version 5.33, as well. It wasn't until I read that it was only concerning the 32 bit versions that I felt a little relief. Still, I've made sure to have all of my AV/AM software, including Malwarebytes, up to date and have completed scans. I also downloaded and ran deep scans with both the Malicious Software Removal Tool and the Safety Scanner from Microsoft (not that they would really pick it up, anyway).
Just last month I was reading complaints and speculations on another board about CCleaner now being owned by Avast and how things may change. This doesn't bode well.
Doesn't bode well for Avast, nor Symantec, whose certificates were compromised.
Marked decrease in spam in the last 12 hours. Amazing how that works...
All of a sudden all of the open relays get shut down after a mass security panic.
You'd think they'd be doing regular checks.
National Cyber Awareness System:
09/19/2017 01:44 PM EDTOriginal release date: September 19, 2017Piriform, a subsidiary of Avast, has released CCleaner 5.34 and has pushed v1.07.3214 to CCleaner Cloud users. These versions do not contain the Floxif malware found in the 32-bit versions of CCleaner 5.33.6162 and CCleaner Cloud 1.07.3191. Floxif malware collects information from the victim's system and can download additional malware to the system.
US-CERT encourages users and administrators to review the Piriform Security Notification and apply the necessary update.
