The malicious program was slipped into legitimate software called CCleaner, which is downloaded for personal computers and Android phones as often as 5 million times a week. At the time of the acquisition, the company said 130 million people used CCleaner. It advised users of CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 to download new versions. A new, uncompromised version of CCleaner was released the same day and a clean version of CCleaner Cloud was released on Sept 15, it said. The nature of the attack code suggests that the hacker won access to a machine used to create CCleaner, Williams said.
Source: bd News24 September 18, 2017 09:45 UTC