CCleaner: 2m users install anti-malware program … that contains malware

Tool now owned by security firm Avast was hacked via a supply chain attack, an increasingly common method of infection

More than two million users of anti-malware tool CCleaner installed a version of the software that had been hacked to include malware, the app's developer confirmed on Monday.

Piriform, the developer of CCleaner now owned by security firm Avast, says that its download servers were compromised at some point between 15 August, when it released version v5.33.6162 of the software, and 12 September, when it updated the servers with a new version.