September 19, 2017 – Morning Cyber Coffee Headlines – “Space Jam” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! September 19, 2017 - Headlines State, Federal Authorities Proposing New Rules o...

Avast’s Piriform Releases Security Update for CCleaner

Piriform, a subsidiary of Avast, has released CCleaner 5.34 and has pushed v1.07.3214 to CCleaner Cloud users. These versions do not contain the Floxif malware found in the 32-bit versions of CCleaner 5.33.6162 and CCleaner Cloud 1.07.3191. Floxif malware collects information from the victim's...

CCleaner Cloud 'CCleaner.exe' Backdoor Trojan Vulnerability - Windows

CCleaner Cloud agent is prone to backdoor trojan installation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CCleaner 'CCleaner.exe' Backdoor Trojan Vulnerability - Windows

CCleaner is prone to backdoor trojan installation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CCleaner Detection (Windows SMB Login)

SMB login-based detection CCleaner Free and Professional Editions. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CCleaner Cloud Agent Detection (Windows SMB Login)

Detects the installed version of CCleaner Cloud Agent. The script logs in via smb, searches for SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[Updated] Infected CCleaner downloads from official servers

Update 9/19/2017: Avast posted a clarification explaining what happened and giving a timeline of the events. One point we should take note of is that the breach preceded the take-over of Piriform by Avast. Users that are unsure whether they were affected by this and whether their data may have be...

CCleaner Software Hacked with Backdoor; 2 Million Users Infected

By Waqas Hackers have illegally modified Avast-owned CCleaner by establishing a backdoor This is a post from HackRead.com Read the original post: CCleaner Software Hacked with Backdoor; 2 Million Users Infected...

Warning: CCleaner Hacked to Distribute Malware; Over 2.3 Million Users Infected

If you have downloaded or updated CCleaner application on your computer between August 15 and September 12 of this year from its official website, then pay attention—your computer has been compromised. CCleaner is a popular application with over 2 billion downloads, created by Piriform and recent...

CCleanup: A Vast Number of Machines at Risk

This post was authored by: Edmund Brumaghin, Ross Gibb, Warren Mercer, Matthew Molyett, and Craig WilliamsUpdate 9/18: CCleaner Cloud version 1.07.3191 is also reported to be affectedUpdate 9/19: This issue was discovered and reported by both Morphisec and Cisco in separate in-field cases and...

Piriform CCleaner Cloud Installed

Binary data ccleanercloudinstalled.nbin...

VulnCheck KEV: CVE-2017-20201

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API...

Piriform CCleaner Installed

Binary data ccleanerinstalled.nbin...

KLA11105 A vulnerability in CCleaner and CCleaner Cloud

A vulnerability was found in CCleaner and CCleaner Cloud. This vulnerability can be exploited remotely to obtain sensitive information or execute arbitrary code. Technical details An unauthorized modification of the CCleaner.exe binary resulted in an insertion of a two-stage backdoor capable of...

Piriform CCleaner 5.33.6162 Backdoor

The version of Piriform CCleaner installed on the remote Windows host is equal to 5.33.6162. It is, therefore, affected by a malicious backdoor in CCleaner.exe that allows remote attackers to obtain sensitive information and install unauthorized software. C Tenable Network Security, Inc...

Piriform CCleaner Cloud 1.07.3191 Backdoor

The version of Piriform CCleaner Cloud installed on the remote Windows host is equal to 1.07.3191. It is, therefore, affected by a malicious backdoor that allows remote attackers to obtain sensitive information and install unauthorized software. C Tenable Network Security, Inc. include"compat.inc...

CCleaner - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application CCleaner published at the 'play' market has multiple vulnerabilities...

Piriform CCleaner Information Disclosure Vulnerability

Piriform CCleaner is an archive cleaning software developed by Piriform, an independent software studio in the UK. Piriform CCleaner suffers from an information disclosure vulnerability that allows local users to obtain sensitive information by searching unallocated disk space...

CVE-2015-3999

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space...

Design/Logic Flaw

Piriform CCleaner 3.26.0.1988 through 5.02.5101 writes the filenames to disk when overwriting files, which allows local users to obtain sensitive information by searching unallocated disk space...