Fake CCleaner installs GhostDesk Chrome spyware
2026-08-12T08:51:44Z•df8ec069cb5761f783acc95b7a54ce99df231ea0771f3095c4632ee98bd0e59a
CCleaner impersonationChrome extensionGhostDeskbrowser compromisecredential theftfake software websitemalvertisingmalwaremulti-stage attackspyware
What happened
Malwarebytes Labs reports that a convincing fake CCleaner website delivers a multi-stage malware infection culminating in GhostDesk spyware deployed as a Chrome extension. The campaign targets users seeking legitimate software downloads and may enable browser surveillance and theft of sensitive information. The provided feed does not identify a specific CVE.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- df8ec069cb5761f783acc95b7a54ce99df231ea0771f3095c4632ee98bd0e59a
- Enrichment time
- 2026-08-12T08:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.