Over 2 million users have installed infected versions of a security application owned by software firm Avast. CCleaner version 5.33, available as a legitimate download from Aug. 15 to Sept. 12, was found to contain a multistage malware attack hidden inside of it. Anyone who downloaded the antivirus software during the infection period must update the app manually to undo this infection. The malware gleans the computer name, a list of software installed, MAC addresses for the first three network interfaces and unique IDs that identify each computer.”]
Source: https://securityintelligence.com/news/security-utility-abuses-supply-chain-for-a-malware-attack/