If you have downloaded the infected version, update to CCleaner v5.34 as soon as possible. "To the best of our knowledge, the second-stage payload never activated It was prep for something bigger, but it was stopped before the attacker got the chance." But based on all the knowledge, we don't think there's any reason for users to panic," he added. Avast chief technology officer Ondrej Vlcek, however, said that this is indeed a serious incident. "2.27 million is certainly a large number, so we're not downplaying in any way. Many believe that Avast is downplaying the severity of the issue with its security notification post. However, it added that the malware also downloaded a second stage payload this server but its functionality is unclear due to encryption. It is possible that the malware was designed to use the infected PCs as part of a botnet. The company has called this "non-sensitive data" used to profile affected PCs.
MAC addresses of first three network adapters.A list of installed software, including Windows updates.Avast Piriform also added that PCs with the malicious CCleaner versions would transmit the following information to a third-party server located in the United States: "We believe that these users are safe now as our investigation indicates we were able to disarm the threat before it was able to do any harm," the company said. 2.27 million downloads of the infected CCleanerĪvast believes that 2.27 million users had downloaded the infected software on their 32-bit Windows machines. The company has urged its users to update CCleaner to version 5.34 or higher, with the latest version being available for download here. In other words, to the best of our knowledge, we were able to disarm the threat before it was able to do any harm. Users of CCleaner Cloud version have received an automatic update.
We would like to apologize for a security incident that we have recently found in CCleaner version and CCleaner Cloud version. The affected versions of CCleaner and CCleaner Cloud were released on August 15 and August 24, respectively.Īvast in its report has apologized for the "security incident." The security firm Cisco Talos informed Avast of its findings on September 13, which then proceeded to release an updated version of its utility. This popularity, however, also makes the utility a hotbed for malware. Last year the security firm also boasted that CCleaner has a growth rate of 5 million additional users per week. The "crap cleaner" has over 2 billion downloads to its name, according to the AV firm Avast itself. When AV firms can't protect their own software.
0 kommentar(er)
