Surprise Me!

CCleaner supply chain malware targeted tech companies

2017-09-22 5 Dailymotion

DISTRICT OF COLUMBIA — A Windows utility tool meant to clean and optimize PCs has instead exposed hundreds of thousands to malicious software. <br /> <br />According to a report from Cisco's Talos Intelligence research team, hackers embedded malware into the CCleaner software, exposing nearly 700,000 to an attack. <br /> <br />The compromised CCleaner version was distributed between August 15 and September 12, and taken down shortly after it was discovered. <br /> <br />Data from the malware's seized command and control center shows it specifically targeted high-profile tech firms. It scanned and profiled infected machines, and sent system information to an external server. <br /> <br />If a system met the malware's requirements, a second payload would be deployed to create a backdoor which the attackers could use to spy and steal company intel. <br /> <br />Researchers examining the malware describe it as complex and sophisticated, evidenced by the fact that it went undetected for weeks. <br /> <br />Though a partial list of affected companies was released, there's no news yet on the damage the malware may have caused. <br /> <br />Avast, the company that owns CCleaner, says it's working with authorities to identify the perps and other servers they used in the attack.

Buy Now on CodeCanyon