U.S. Government Warns Lenovo Computer Owners Over Superfish Malware

Posted on February 20, 2015

Lenovo G410 Laptop

It was recently determined that Lenovo computers and laptops have malware software in them. The software is called Superfish. Lenovo is a computer company based in China. It acquired IBM's personal computer business in 2005.

The U.S. Department of Homeland Security is now warning consumers who own Lenovo computers to remove the Superfish malware. The software can be used to execute an SSL spoofing attack. Lenovo provided some Superfish uninstall instructions here. Lenovo says in a statement that Superfish is only on Lenovo Notebook products and that other products are not impacted.

Reuters reports the DHS warned owners of the devices to get the software removed through an alert released through its National Cyber Awareness System. The Verge reports that Windows Defender is now actively removing the virus on Windows computers.

Lenovo said in a statement, "We stopped the preloads beginning in January. We shut down the server connections that enable the software (also in January), and we are providing online resources to help users remove this software."

Wired calls Lenovo's response to the adware as "astonishingly clueless." Wired says Robert Graham, the CEO of Errata Security, found that he could intercept the encrypted communications of people with Lenovo laptops while hanging out a cafe with a wifi hotspot.

Photo: Lenovo