Compromiseseverity: High2017-09-18
CCleaner supply-chain compromise attributed to APT41
published by Cisco Talos
Actor
Chinese state-affiliated group notable for blending espionage with financially-motivated operations (game-industry currency theft, cryptocurrency). Implicated in multiple software supply-chain compro…
Summary
Trojanized CCleaner installer was distributed via Piriform's official update channel for approximately a month, reaching more than 2.27 million users. Second-stage targeting focused on technology companies; attributed by multiple researchers to the APT41/Barium intrusion set.
Tags
supply-chaintrojanized-installer