More than two million users of anti-malware tool CCleaner installed a version of the software that had been hacked to include malware, the app’s developer confirmed on Monday. In that period, a trojan was loaded into the download package which sent “non-sensitive data” from infected users’ computers back to a server located in the US. The data, according to Piriform, included “computer name, IP address, list of installed software, list of active software, list of network adapters”. By taking down the “command and control” server, Piriform may have prevented the infection being used to inflict further damage. Compromising downloads to trusted software is an increasingly common route by which malware authors infect devices.

Source: The Guardian September 19, 2017 06:00 UTC