CC Cleaner hacked to distribute Malware To 2+ Million Users

SMH. Heres the article: http://thehackernews.com/2017/09/ccleaner-hacked-malware.html

I wonder how many times this has happened in various softwares and nobody found out about it.

My guess a lot.

Phew, i have a 64 bit system, only Win 32 bit seems to be affected. Already updated to the latest version (5.34).

Thanks for the heads up.

hmm. it recently did an update on my computer, installed and everything on its own without asking me.. usually I have to go to piriform website..maybe I've been pwned :/

rancidricky said:

hmm. it recently did an update on my computer, installed and everything on its own without asking me.. usually I have to go to piriform website..maybe I've been pwned :/

Click to expand...

Nah, i think you're safe. The forced update must have been initiated by CCleaner itself after they found out about the hack and not the hackers.
Check the version number, it should be v5.34.6207.
v5.34 and up is safe, the compromised version number is v5.33.6162, which was available for download from 15th August until 12th September.

hmm.. I got v5.34.6207 (64 bit), so latest and safe version, but I couldn't recall when it was last updated, so maybe prior to the forced update it was the infected version... hope not lol, but I'm paranoid af so will probably change all my password anyway..
Edit.. oh, just read 64 bit version wasn't affected.. crisis averted.
apparently it collects "

• Name of the computer
• List of installed software, including Windows updates
• List of running processes
• MAC addresses of first three network adapters
• Additional information whether the process is running with administrator privileges, whether it is a 64-bit system, etc."

What's the point of that data lol

I knew there was a reason behind me always clicking "update later" whenever I restarted my PC, yay!

Thanks for the heads up...Keep it up

rancidricky said:

hmm.. I got v5.34.6207 (64 bit), so latest and safe version, but I couldn't recall when it was last updated, so maybe prior to the forced update it was the infected version... hope not lol, but I'm paranoid af so will probably change all my password anyway..
Edit.. oh, just read 64 bit version wasn't affected.. crisis averted.
apparently it collects "

• Name of the computer
• List of installed software, including Windows updates
• List of running processes
• MAC addresses of first three network adapters
• Additional information whether the process is running with administrator privileges, whether it is a 64-bit system, etc."

What's the point of that data lol

Click to expand...

I thought the same, what can the data be used for, anyone can chime in here?

luker2000 said:

I thought the same, what can the data be used for, anyone can chime in here?

Click to expand...

To hack you even more.

Skyebug77 said:

To hack you even more.

Click to expand...

so they can organise and filter data? for example only include accounts from US with admin privileges on windows 7 and 8 and then do something with the virus already on the machine?
So the virus does more than collect data?

luker2000 said:

so they can organise and filter data? for example only include accounts from US with admin privileges on windows 7 and 8 and then do something with the virus already on the machine?
So the virus does more than collect data?

Click to expand...

To see if you have an easily hackable network and machine, and possibly social engineer you to follow links etc for products that you have, and to see what can be used without admin permission on your machine.

Skyebug77 said:

To see if you have an easily hackable network and machine, and possibly social engineer you to follow links etc for products that you have, and to see what can be used without admin permission on your machine.

Click to expand...

ah makes sense thanks skyebug

This is why I never download shit I don't really need. My computer software's are simplistic, there's just to many risks these days.

What the... I'm updating right now, thanks a ton for the info. Software already comes with enough crap out of the box.

Case example why I no longer update. It all started with the Microsoft Windows 10 malware, moved to trying to backport the Windows 10 spyware to Windows 8.1 and Windows 7. Now you have stuff like this. I now shut all updates off and rely on backups if there is a problem.

I'm still thinking why I have Mac.

JustUs said:

Case example why I no longer update. It all started with the Microsoft Windows 10 malware, moved to trying to backport the Windows 10 spyware to Windows 8.1 and Windows 7. Now you have stuff like this. I now shut all updates off and rely on backups if there is a problem.

Click to expand...

Is that you, JustUs?



On a more serious not: i'm not sure, if it's the wisest thing to do. It sounds pretty counterproductive to me. A good portion of the updates are security updates, if you use outdated software/OS, your system gets more vulnerable than those which are up to date.

Which is the biggest issue?
1. MS tracking you and collecting info what's probably already known about you by other companies like Google, Facebook etc.
We are already in the system in more than one way. If you don't have anything to hide, why care?
2. Someone hacking into your system because of outdated software/OS and probably stealing all your shit?

Occurrences like this with CCleaner i guess are relatively rare.

HoNeYBiRD said:

If you don't have anything to hide, why care?

Click to expand...

This is a very ingenious phrase that short-circuits a lot of people. That's because at its core, it neatly implies you are not a sovereign being but instead being owned by someone else - your master who surveys you. Added by the fact that digital surveillance is not as dis-comfortable as physical one, this line really makes many people stutter in their thought. Still, most of the very same people who believe that line, would object to having a policeman constantly 3 feet away from them.