Czech software firm Avast says CCleaner was attacked — again
An unidentified attacker used stolen credentials to gain high-level privileges on the network of Czech software security vendor Avast, the company said Monday. The target of the persistent attack was likely Avast’s software-cleaning tool, CCleaner — the same product that was infiltrated in an infamous 2017 supply-chain attack breach that affected over 2 million computers. Worried that the attackers would manipulate CCleaner again, Avast said it halted an upcoming release of the product, revoked its previous security certificate, and put out a security update to users. Those measures, Avast CISO Jaya Baloo assured customers, were enough to ensure that CCleaner users were unaffected by the attack. Avast, which boasts of 400 million users of its products around the world, said it will study its network logs to learn more about the intrusion. “[I]t is clear that this was an extremely sophisticated attempt against us that had the intention to leave no traces […]
The post Czech software firm Avast says CCleaner was attacked — again appeared first on CyberScoop.
Continue reading Czech software firm Avast says CCleaner was attacked — again