It seems like things are just getting worse for electronics manufacturer Lenovo. After it was revealed early this week that the company installed the Superfish adware onto machine manufactured during September and October last year, the company’s Lenovo.com website has been hacked.
Notorious hacker group Lizard Squad, who has claimed responsibility for a slew of attacks against large corporates, apparently took responsibility for this hack as well.
Not only did it deface the front-end, replacing the usual product shots with images of people sitting in front of their computers, but by taking over the Lenovo domain, it also gained access to the company’s email system.
“Unfortunately, Lenovo has been the victim of a cyber attack. One effect of this attack was to redirect traffic from the Lenovo website. We are also actively investigating other aspects. We are responding and have already restored certain functionality to our public facing website,” Lenovo said in a statement some hours after the hack was reported on.
If you viewed the HTML source code of the website during the hack, you would have noticed that it said the “new and improved rebranded” was brought to you by Ryan King and Rory Andrew Godfrey – two members believed to be part of Lizard Squad.
By having access to Lenovo’s emails, the hacker group posted screengrabs of emails discovered, and posted the images on its Twitter account.
Superfish removal bricks some devices? Great work Lenovo pic.twitter.com/phXiBS3KzO
— Lizard Squad (@LizardCircle) February 25, 2015
The group also said that, while it discovered some interesting things, it will post more updated after it has gone through all the information gathered.
We’ll comb the Lenovo dump for more interesting things later.
— Lizard Squad (@LizardCircle) February 25, 2015
Marc Rogers, a principal security researcher at content delivery network CloudFlare who helped Lenovo gain back control of its domain, told Ars Technica that his team started working on the hack minutes after it was discovered.
“We took control as soon as we found out (minutes after it happened) and are now working with Lenovo to restore service. All we saw was the domain come in to us, at which point we took immediate action to protect them and their service.”
The Lenovo.com domain appears to be fully-functioning again, as well as the local South Africa site.
[Via Ars Technica]
