If you use the PC Cleaner CCleaner, there’s been a report that malware has managed to make it’s way into one of the builds — so please be sure to install its latest update!
It was noticed on 13 September that the installer for CCleaner V5.33 was triggering its malware protection systems. Upon inspection, the researchers found that the CCleaner application was legitimate and had a valid digital signature from its makers, but it also contained a malicious payload.
The payload contained a Domain Generation Algorithm and Command Control functionality that could be used to send encrypted information about the computer back to a server controlled by hackers. Although the software’s maker claims that in its review it has “not detected an execution of the second stage payload and believe that its activation is highly unlikely.”
No malicious software has been found in CCleaner 5.34, which was released 13 September and the malware was only present in the build that was released on 14 August (which has now been removed from the company’s download page)
Anyone using the free version of CCleaner needs to manually download and update their software as soon as possible to ensure your machine is safe.
For further information or if you would like to discuss our internet security service, please be in touch with us at [email protected]