Update 9/18: CCleaner Cloud version 1.07.3191 is also reported to be affected Update 9/19: This issue was discovered and reported by both Morphisec and Cisco in separate in-field cases and reported separately to Avast. Update 9/19: There has been some confusion on how the DGA domains resolve. The fallback command and control scheme in use by the CCBkdr involves: 1. Generating a Monthly Domain name
![CCleanup: A Vast Number of Machines at Risk](https://cdn-ak-scissors.b.st-hatena.com/image/square/bc6d409b8deb4ea2675f90561376965155b1b9e8/height=288;version=1;width=512/https%3A%2F%2Fblog.talosintelligence.com%2Fcontent%2Fimages%2F-qi4FSpRozUc%2FWb8VCqNIdUI%2FAAAAAAAAAXQ%2F1TRYybdmkkUbrd428EfrM3d4NSG_DGQ0QCLcBGAs%2Fw1200-h630-p-k-no-nu%2Fimage7.png)