Quote:Users of utilities that reclaim disk space should think twice if someone tries to get them to download BleachBit. Cybercriminals have created a web page that purports to be the official website of the tool, but instead spreads the AZORult information stealer.
 
BleachBit is a tool that can help Windows, Linux, and macOS users reclaim disk space by deleting disposable data. It has over one million downloads on Sourceforge since its original release and is also available straight from the developer's website.
 
AZORult is a longstanding info stealer selling for about $100 on Russian underground forums. It can collect various types of sensitive data from an infected computer such as browser history, saved logins, stored credentials in FTP clients, desktop and text files, and more.

When designing the site, the bad actors paid attention to the general details and used the domain bleachbitcleaner[.]com - last updated on August 27 - in order to fool a lot of users into thinking it is the legitimate home of the utility.