LizardSquad Hacks Lenovo.com In Apparent Retaliation Over Superfish Adware Scam
As we discovered late last week, Lenovo has been serving up some tainted Superfish via its consumer PCs. Once Lenovo was called out for its heinous actions, the company offered an apology and vowed to remove Superfish from shipping systems (it provided removal instructions and later an automatic removal tool for machines already affected by Superfish). However, the apology apparently wasn’t enough as Lenovo is already facing a lawsuit stemming from Superfish.
Now it looks a though hacker group Lizard Squad is retaliating in its own, childish way. At around 4 PM EST, Lenovo.com was showing a slideshow of what appears to be rebellious teenagers as the song "Breaking Free" plays in the background.
HotHardware staffers have verified the hack accessing Lenovo.com from two multiple locations around the United States. However, not all of us are seeing the hacked page, which leads us to believe that Lenovo is doing its best to mitigate the infiltration.
According to Jonathan Zdziarski, who calls himself a “forensic scientist,” Lenovo’s domain record was hijacked. “Well, that's what @lenovo gets, I guess, for using some obscure Chinese domain registrar,” wrote Zdziarski on Twitter. “Don't they know never to trust Chinese computers?”
There's your problem, @lenovo. pic.twitter.com/H4uIstGnoe
— Jonathan Zdziarski (@JZdziarski) February 25, 2015
But the following post by Zdziarski would be quite a wicked turn of events if true:
How ironic would it be if someone got Lenovo's registrar password by decrypting the SSL traffic from their network using a Superfish cert.
— Jonathan Zdziarski (@JZdziarski) February 25, 2015
We’ll keep you updated once we find more information regarding this cyberattack.