Lenovo laptops loaded with Superfish malware

Forums › Laptops and mobile computers › Lenovo laptops loaded with Superfish malware

freitasm

BDFL - Memuneh
64673 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

# 165761 19-Feb-2015 20:02

One person supports this post

It seems Lenovo laptops are being loaded with Superfish malware out of the factory.

The malware installs a SSL certificate and acts as a proxy, in effect doing a MITM attack to decrypt any encrypted pages (such as search engines) and analyze pages to add their own advertising and popups.

If you like your privacy and security...

My technology disclosure | Digital Transformation | Enterprise Content Management | Customer Relationship Management | Data Insights, Business Intelligence and Advanced Analytics

1 | 2 | 3

2636 posts

Uber Geek

Trusted

Lifetime subscriber

# 1242548 19-Feb-2015 20:07

2 people support this post

One of my suppliers has been encouraging me to start quoting Lenovo desktops for clients, and I was wavering a bit. I'm not considering it any more (even though this issue is supposedly only on consumer machines). This tells me a lot about the ATTITUDE of a company.

"4 wheels move the body. 2 wheels move the soul."

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

freitasm

BDFL - Memuneh
64673 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

# 1242572 19-Feb-2015 20:52

Certainly not looking good.

My technology disclosure | Digital Transformation | Enterprise Content Management | Customer Relationship Management | Data Insights, Business Intelligence and Advanced Analytics

mattwnz

15163 posts

Uber Geek

# 1242583 19-Feb-2015 20:57

Wow if true.

Dairyxox

1493 posts

Uber Geek

# 1242605 19-Feb-2015 21:19

Shocking but not entirely dissimilar to malware on all major brands hard drives exposed recently...

Kaspersky's reconstructions of the spying programs show that they could work in disk drives sold by more than a dozen companies, comprising essentially the entire market. They include Western Digital Corp, Seagate Technology Plc, Toshiba Corp, IBM, Micron Technology Inc and Samsung Electronics Co Ltd.

Russian researchers expose breakthrough U.S. spying program

How many of these were brought for corporate use.
This certainly lessens my opinion of Lenovo that's for sure.

gzt

10909 posts

Uber Geek

# 1242610 19-Feb-2015 21:23

freitasm: It seems Lenovo laptops are being loaded with Superfish malware out of the factory.

The malware installs a SSL certificate and acts as a proxy, in effect doing a MITM attack to decrypt any encrypted pages (such as search engines) and analyze pages to add their own advertising and popups.

If you like your privacy and security...

Not good. They will regret that for a long time.

gzt

10909 posts

Uber Geek

# 1242655 19-Feb-2015 22:01

Dairyxox: Shocking but not entirely dissimilar to malware on all major brands hard drives exposed recently...

Kaspersky's reconstructions of the spying programs show that they could work in disk drives sold by more than a dozen companies, comprising essentially the entire market. They include Western Digital Corp, Seagate Technology Plc, Toshiba Corp, IBM, Micron Technology Inc and Samsung Electronics Co Ltd.

Russian researchers expose breakthrough U.S. spying program

How many of these were brought for corporate use.
This certainly lessens my opinion of Lenovo that's for sure.

Yes, this is entirely dissimilar.

Dairyxox

1493 posts

Uber Geek

# 1242667 19-Feb-2015 22:14

There are several similarities.

raytaylor

3404 posts

Uber Geek

Trusted

# 1242696 19-Feb-2015 23:46

Is this just a mistake, a rogue staffer, or a marketing department decision f* up?

I hope its not the latter.

And we see one of these stories each year - with malware on usb sticks given out as corporate promos, or pre-installed ona tablet etc

usually a rogue staffer is assigned as the scapegoat and the company puts out a statement that it was the factory that screwed up, they take privacy seriously, someone has been fired, bla bla bla

Ray Taylor
Taylor Broadband (rural hawkes bay)
www.ruralkiwi.com

There is no place like localhost
For my general guide to extending your wireless network Click Here

Batman

Mad Scientist
20924 posts

Uber Geek

Trusted

Lifetime subscriber

# 1242700 19-Feb-2015 23:55

and when exactly did it start?

Involuntary autocorrect in operation on mobile device. Apologies in advance.

gzt

10909 posts

Uber Geek

# 1242702 19-Feb-2015 23:58

Dairyxox: There are several similarities.

Probably not so much it should be confused in the same thread, but here we go ; )

http://www.theregister.co.uk/2015/02/17/kaspersky_labs_equation_group/
http://mobile.eweek.com/security/equation-group-spyware-poses-threats-far-beyond-its-original-purpose.html

Kaspersky discovered that one. There is no indication their product will detect it, anyone know differnet?

surfisup1000

4369 posts

Uber Geek

# 1242704 20-Feb-2015 00:01

2 people support this post

This is a chinese government scheme to mine and steal data.

Huawei are doing the same with every chip designed to sniff data packets.

The conspiracy theorist in me :)

I am planning on buying the new x1 with the sm951 ssd , at such time they come on sale.

gzt

10909 posts

Uber Geek

# 1242708 20-Feb-2015 00:08

raytaylor: Is this just a mistake, a rogue staffer, or a marketing department decision f* up?

I hope its not the latter.

And we see one of these stories each year - with malware on usb sticks given out as corporate promos, or pre-installed ona tablet etc

usually a rogue staffer is assigned as the scapegoat and the company puts out a statement that it was the factory that screwed up, they take privacy seriously, someone has been fired, bla bla bla

I think its pretty simple. Manufacturers just assume the parties offering them money to preload (ie; bloat) the system are not (a) evil or (b) stupid and get a contract signed to that effect. But no actual security auditing. That would be expensive.

But probably this requirement is about to be added. ; )

khull

1245 posts

Uber Geek

# 1242725 20-Feb-2015 00:57

One person supports this post

i stopped buying PCs the day a brand new HP netbook came with both Norton and McAffee installed. Not sure how they managed that in their deployment image.

These days for any brand new PC I help set up for friends/family, first thing I do is a clean install