SecPod

Learn Search

Search across all Learn content

← Back to Expressions & POVs
Malicious Code Present in “Piriform – CCleaner v5.33” – CleanUp

Malicious Code Present in “Piriform – CCleaner v5.33” – CleanUp

Piriform CCleaner is a system cleanup tool by Piriform, which is now owned by Avast. A suspicious activity  identified on September 12th, 2017, where an unknown IP address receiving data from software found in version 5.33.6162 of CCleaner. Later it was present that the 5.33.6162 version of CCleaner...

Sep 19, 2017By Kashinath T1 min read
Piriform CCleaner
Piriform CCleaner

Piriform CCleaner is a system cleanup tool by Piriform, which is now owned by Avast. A suspicious activity  identified on September 12th, 2017, where an unknown IP address receiving data from software found in version 5.33.6162 of CCleaner. Later it was present that the 5.33.6162 version of CCleaner was illegally modifying before it was releasing to the public. Therefore, a good vulnerability management tool can prevent these attacks.

The malicious code piriform ccleaner sent encrypted information about the infected machine to a C&C server that the hackers had set up. Among other things, the name of the computer, a list of installed programs and running processes, as well as the Mac addresses of the network adapters also received by the C&C. Vulnerability management system can resolve these issues.

This alone is not too sensitive information. However, the infected file opened a backdoor, allowing the attackers to load additional malicious software, such as keyloggers.

Click here to understand, how Saner can help organizations to protect against “Malicious CCleaner v5.33” and similar threat’s.

Featured Posts

Open What Is a Kubernetes Network Policy?
What Is a Kubernetes Network Policy?

Point of View

What Is a Kubernetes Network Policy?

A Kubernetes network policy controls incoming and outgoing connections between Pods and other network destinations. The article explains how ingress and egress rules work, why default network access can create security risks, and how to configure and verify traffic restrictions. It also covers common policy mistakes and how Saner COSP's COAE and COPM modules support Kubernetes exposure visibility and configuration assessment.

Oct 16, 2026

Open Hybrid Cloud Security for Kubernetes Across Standalone, On-Prem, and Managed Clusters
Hybrid Cloud Security for Kubernetes Across Standalone, On-Prem, and Managed Clusters

Point of View

Hybrid Cloud Security for Kubernetes Across Standalone, On-Prem, and Managed Clusters

Hybrid cloud security for Kubernetes involves managing security risks across standalone, on-premises, and managed clusters. The blog explains the differences between Amazon EKS, Microsoft AKS, and Google GKE, common security challenges, and practical steps for maintaining consistent security controls. It also covers how Saner COSP helps teams assess configurations, manage access, prioritize risks, and track remediation across Kubernetes environments.

Oct 16, 2026

Open Excellence Is a Choice
Excellence Is a Choice

Point of View

Excellence Is a Choice

Oct 14, 2026

Open AWS Security Best Practices for Financial Services: Beyond Configuration Management
AWS_Security_Best_Practices_For_Financial_Services

Point of View

AWS Security Best Practices for Financial Services: Beyond Configuration Management

Oct 13, 2026