Hackers compromised free CCleaner software, Avast's Piriform says

[Eugene]

Last edited Mon Sep 18, 2017, 08:48 AM - Edit history (1)

Source: Reuters

#CYBER RISK SEPTEMBER 18, 2017 / 4:39 AM / UPDATED AN HOUR AGO

Hackers compromised free CCleaner software, Avast's Piriform says

Joseph Menn
3 MIN READ

SAN FRANCISCO (Reuters) - Hackers broke into British company Piriform’s free software for optimizing computer performance last month potentially allowing them to control the devices of more than two million users, the company and independent researchers said on Monday.

The malicious program was slipped into legitimate software called CCleaner, which is downloaded for personal computers and Android phones as often as five million times a week. It cleans up junk programs and advertising cookies to speed up devices.

CCleaner is the main product made by London’s Piriform, which was bought in July by Prague-based Avast, one of the world’s largest computer security vendors. At the time of the acquisition, the company said 130 million people used CCleaner.

A version of CCleaner downloaded in August included remote administration tools that tried to connect to several unregistered web pages, presumably to download additional unauthorized programs, security researchers at Cisco’s (CSCO.O) Talos unit said.

-snip-

... It advised users of CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 to download new versions. ...


-snip

Read more: http://www.reuters.com/article/us-security-avast/hackers-compromised-free-ccleaner-software-avasts-piriform-says-idUSKCN1BT0R9

[DonaldsRump]

1. That really sux!!

I have been using CCleaner for years on my PC and for about a year on my Android phone. It was a great product, and it is awful to hear this.

Thanks for posting this. I think I am ok since I am using an older version, but it worries me that this could happen.

Hacks and data privacy breaches are becoming more and more commonplace. It's very bad when a well-established product like CCleaner can have this happen.

[beachbum bob]

2. luckily I only do upgrades once a year just to be sure

[bucolic_frolic]

3. Do we have any free pc security products made in the U.S.A.?

AVG, Glary Utilities, Adaware, Malwarebytes, Avast, Kasperski

I use a variety of them, mix and match, with special cleanups for specific symptoms

Not that I couldn't take this Vista machine and chuck it

Getting very close to installing Linux Mint ... but even there a small array of security programs have emerged though some say you don't need any

[CentralMass]

4. Look at Fedora Desktop (Linux). It is really good.

[windje]

7. Free? You get what you pay for

You might consider Emsisoft. New Zealand based. Works well for my windows system.

I have no association with the business in any way other than as a user

[DonaldsRump]

8. Well, I paid a lot for Kaspersky Internet

...and that hasn't turned out too well. I have no idea whether it's really a problem or not, but I finally bailed on the product after buying the 3 PC yearly updates for a number of years. Am relying now on good old (and "free&quot Windows Defender.

Actually, there is some brilliant shareware like CCleaner that still has so much functionality in its free version. It has been an excellent product, and I am sure it will continue to be. It's just scary how easily it seems everything is hacked.

[teach1st]

17. I'm another happy Emsisoft user

I've been using it for years.

[left-of-center2012]

9. Kaspersky is Russian

"Kaspersky Lab is a Russian multinational cybersecurity and anti-virus provider headquartered in Moscow"
https://en.wikipedia.org/wiki/Kaspersky_Lab

"Kaspersky Lab Has Been Working With Russian Intelligence"
https://www.bloomberg.com/news/articles/2017-07-11/kaspersky-lab-has-been-working-with-russian-intelligence

[Baitball Blogger]

5. How do I find the version of my CCleaner?

I just looked and found nothing in properties and I can't find an "about"

[OneBlueDotBama]

6. Open CC Cleaner

On the top bar, header, right under where is says CC Cleaner, is the version number.
To the right of the version it also lists the Win Version, Processor, RAM & Graphics.

[Baitball Blogger]

10. Right in my face.

Thank you. I have a very much older version. I've tried to update but it always takes me to a site that offers a paid version.

[OneBlueDotBama]

12. You can try this Link

Has options for , free, Pro & Pro Plus...

It's the vendor's site, Hopefully they have actually remedied the problem.

https://www.piriform.com/ccleaner/download

[Baitball Blogger]

16. Thank you!

[Frustratedlady]

11. I used CCleaner 3-4 weeks ago and it messed me up royally.

I had to have a tech come over and fix it (another $100 down the drain) and he couldn't figure out why this happened to me. First time I'd ever had problems with CCleaner.

I ran Malwarebytes a bit ago and found 2 Trojans but am scared now to use CCleaner.

I just checked the header you mentioned and those were all listed as you said. What is Radeon? I know I saw that recently. I can't keep up with all these companies/terms. Old dog/new tricks.

[OneBlueDotBama]

13. Radeon

is a graphics program that is usually associated with the chip manufacturer AMD.

[Frustratedlady]

14. Thanks. I'm afraid to use anything anymore.

Wish these hackers had a day job.

[OneBlueDotBama]

15. I hear you

We froze all our credit reporting stuff years ago, after South Carolina was hacked, on the advice of our advisor. Unfroze it once for a credit card company for three days.