CCleaner for Mac download prompts invalid Security Certificate

[Coffee_Inhaler]

I just tried to download the free CCleaner for Mac version and got the following security error -

 

"Your connection is not private

Attackers might be trying to steak you information....etc

 

This server could not prove that it is download.piriform.com; it's security certificate is from *.cloudfront.net.

This may be caused by a misconfiguration or an attacker intercepting your connection.

 

 

 

 Worried that something has been hacked and I'm being pushed to a 'cloudfront.net' (ie. malware) version of the software. 

Invalid Security Certificate.pdf

[hazelnut]

I shall try and get some info about this for you.

 

Bear in mind it is the weekend so contact with Piriform may be limited.

[Nergal]

I shall try and get some info about this for you.

 

Bear in mind it is the weekend so contact with Piriform may be limited.

Being that the devs are (I believe) mostly in the U.S.A. its also a holiday "long" weekend, including monday's "Memorial Day".

[Coffee_Inhaler]

Thanks guys - appreciate your responses.

 

Understand the timing constraints in getting a vendor/dev response.

[Coffee_Inhaler]

*** UPDATE ****

Just did a little more research (didn't do too much when this originally occurred as it as after 2:30am in my timezone !!) and found the following:

 

 

CloudFront.net is not a web site. It is a redirect to Amazon CloudFront. Amazon CloudFront is a web service for content delivery. It integrates with other Amazon Web Services to give developers and businesses an easy way to distribute content to end users with low latency, high data transfer speeds, and no commitments. It is a pay-as-you-go service.

and also:

 

 

Amazon Cloudfront is a cloud based Content Delivery Web Service by Amazon Web Services.It integrates with other Amazon Web Services like S3, EC2 etc to give developers and businesses an easy way to distribute content to end users with low cost, low latency, high data transfer speeds, and no commitments. It is a pay-as-you-go service. Payment of Amazon CloudFront is based on amount of data transfer and requests like http, https etc not based on per hourly as many other Amazon Web Services. AWS also provides free tier to their customers receive 50 GB Data Transfer Out and 2,000,000 HTTP and HTTPS Requests each month for one year.

 

Now I'm guessing that perhaps this is just an AWS implementation that the Piriform Devs are utilising to deploy the CCleaner for Mac download.

(It's unfortunate that the name of the AWS service for distributed Content Delivery (Cloudfront) also corresponds to a previous virus/malware !!)

 

Would've been really handy if there was some sort of note to expect this issue - perhaps an update to the website for future (Mac) users experiencing the same problem ??

[hazelnut]

Aparently it's caused when accessing Piriform.com site using https and trying to download CCleaner Mac, which is coming from a non-https cloudfront link.

 

The Piriform team are looking into it.