Flofix Trojan

The Flofix Trojan is a threatening application that first attracted the attention of malware researchers in 2017 – for over a month, the threatening software was embedded inside the installation package of CCleaner, a popular PC optimization utility. The affected versions were CCleaner 5.33.6162 and CCleaner Cloud 1.07.3191, and the issue has been resolved since then. However, the Flofix Trojan may still be active to this very day, and it is likely to be distributed through the use of deceptive advertisements, fake downloads and other shady content.

But what does the Flofix Trojan do exactly? It is believed that this malware transmits information about the infected system's software, hardware and operating system configuration. The data is sent to a remote Command-and-Control server, but it is not clear how the criminals make use of this information. Allegedly, the Flofix Trojan also has the ability to download and run additional programs on infected computers, but this feature remained unused during the massive 2017 supply-chain attack campaign.

The events from 2017 show that threats like the Flofix Trojan may attack even from sources you deem to be trustworthy. To protect yourself, you need to use an up-to-date anti-malware application at all times.