#Ccleaner malware called code

#Ccleaner malware called code

They also theorized the malicious code could have been inserted by someone with insider access to the development or build environments within the organization. However, the tool was downloaded from the official website and was signed using a valid digital certificate.īecause the application came directly from its official source and was modified to spread malware, researchers reasoned it was likely a threat actor attacked and compromised the supply chain used to distribute the software.

The behavior initially made the researchers think the application may have been a fake, designed to trick people into downloading it. The researchers caught the issue when they spotted a version of CCleaner making requests to communicate with suspicious website domains. The maliciously modified version of the tool was available for download until Sept. 15 and used to distribute a type of malware called Floxif, researchers at Cisco-owned cyber security firm Talos Intelligence found.

Version 5.33 of the CCleaner and version 1.07 of CCleaner Cloud were compromised by hackers on Aug. A widely used Windows utility application called CCleaner was unknowingly delivering malware to users who downloaded the tool for longer than a month before it was discovered, according to security researchers.