CCleaner C2 Server Causes Concern + Technical Analysis

S3xySmurf · 09-21-2017, 07:43 AM

Cisco Talos published the technical analysis with some very interesting results, they believe it's Group 72 behind the attack, looks like they were specifically targetting certain domains.

Write Up

Technical Analsis

al68 · 09-21-2017, 09:13 AM

Looks like big thing and not just a vulnerability forgotten..I wonder if we could trust Avast and the other products related with this company. I couldn't find any official statement from CCleaner/Avast

S3xySmurf · 09-21-2017, 09:21 AM

(09-21-2017, 09:13 AM)al68 Wrote: Looks like big thing and not just a vulnerability forgotten..I wonder if we could trust Avast and the other products related with this company. I couldn't find any official statement from CCleaner/Avast

It is a bit odd how this has happened big company like avast buys ccleaner and then boom gets hacked ?

mothered · 09-23-2017, 06:18 AM

(09-21-2017, 09:21 AM)S3xySmurf Wrote: It is a bit odd how this has happened big company like avast buys ccleaner and then boom gets hacked ?

Could It be a matter of Inconvenient timing, or the transition from one company to another causing the Issue?

It wouldn't surprise me If the latter Is the cause- with Avast being responsible In some way.

S3xySmurf · 09-23-2017, 07:19 AM

(09-23-2017, 06:18 AM)mothered Wrote:
(09-21-2017, 09:21 AM)S3xySmurf Wrote: It is a bit odd how this has happened big company like avast buys ccleaner and then boom gets hacked ?

Could It be a matter of Inconvenient timing, or the transition from one company to another causing the Issue?

It wouldn't surprise me If the latter Is the cause- with Avast being responsible In some way.

Good point, mind you this type of attack seems to be on the rise, hack the big company which distributes to many people and profit.