CCleaner supply chain malware targeted tech companies

DISTRICT OF COLUMBIA — A Windows utility tool meant to clean and optimize PCs has instead exposed hundreds of thousands to malicious software.

According to a report from Cisco's Talos Intelligence research team, hackers embedded malware into the CCleaner software, exposing nearly 700,000 to an attack.

The compromised CCleaner version was distributed between August 15 and September 12, and taken down shortly after it was discovered.

Data from the malware's seized command and control center shows it specifically targeted high-profile tech firms. It scanned and profiled infected machines, and sent system information to an external server.

If a system met the malware's requirements, a second payload would be deployed to create a backdoor which the attackers could use to spy and steal company intel.

Researchers examining the malware describe it as complex and sophisticated, evidenced by the fact that it went undetected for weeks.

Though a partial list of affected companies was released, there's no news yet on the damage the malware may have caused.

Avast, the company that owns CCleaner, says it's working with authorities to identify the perps and other servers they used in the attack.