The SSL-busting technology recently discovered to be pre-installed on Lenovo laptops has been found as part of another 12 pieces of software, including Trojan malware. The HTTPS-bypassing code, developed by Israeli company Komodia, was a part of the now-infamous Superfish software found on-board Lenovo laptops.
Matt Richard, threat researcher for the Facebook security team, revealed the extent of the code’s reach in a post on Friday, writing, “What all these applications have in common is that they make people less secure through their use of an easily obtained root CA [certificate authority], they provide little information about the risks of the technology, and in some cases they are difficult to remove.”
He continued, “Furthermore, it is likely that these intercepting SSL proxies won’t keep up with the HTTPS features in browsers (e.g., certificate pinning and forward secrecy), meaning they could potentially expose private data to network attackers. Some of these deficiencies can be detected by antivirus products as malware or adware, though from our research, detection successes are sporadic.”
Even the developer Komodia calls one of its SDKs an “SSL hijacker”, so it’s no surprise that the code has found its way into malicious software. The malware, Trojan.Nurjax, was first discovered back in December. According to Symantec, the malware “hijacks the Web browser on the compromised computer and may download additional threats.”
Lenovo has apologised for inflicting the HTTPS-breaking code upon is customers and has released a program to aid removal of the Superfish software.
Source: Ars Technica
Take your gaming endeavors to new heights with the Level 20 RGB gaming keyboard. Game…
The ACER K293C monitor is a 29-inch ultra-wide monitor that offers a full HD resolution…
The CH780 is a majestic premium ATX+ case that places an emphasis on displaying the…
Meet the PRO B760-P WIFI DDR4, here to support the very latest 13th Generation Intel…
TH420 ARGB Sync is a 420mm all-in-one liquid cooler capable of dissipating heat from the…
Remove all obstacles that get in the way of victory with the lightest and fastest…