10/3/2023 0 Comments Ccleaner attackThis is only the most recent example of such an attack. This article first appeared in the Cyber Saturday edition of Data Sheet, Fortune’s daily newsletter on the top tech news. Presumably, the intruders sought trade secrets. With that foothold, the attackers then attempted to drill down deeper into the networks of at least 18 big tech company targets, including Google, Intel, Microsoft, Samsung, HTC, and Cisco. Here’s what happened: In August, some unknown hacking group inserted a backdoor into the CCleaner software, which was then dutifully installed on more than 700,000 machines. (Morphisec, an Israeli cybersecurity startup, had discovered the compromise too.) The hacking operation sabotaged CCleaner, a popular piece of computer cleaning software distributed by Avast, a Czech antivirus firm. Cisco researchers exposed one of these sneaky incursions earlier this week. That’s good digital hygiene, after all.Īt least that’s what we’ve been trained to think. Customers, careful to keep their software up to date, don’t think twice about downloading the latest iterations. The scheme goes like this: Hackers compromise a trusted software vendor, subvert its products with their own malicious versions, and then use the tainted formulation to infect customers - thereby bypassing internal security controls and easily spreading malware far and wide.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |