What is the Superfish vulnerability?

A software known as Superfish Visual Discovery was pre-installed on Lenovo products over the last two years. The Superfish software pushes ads in Google search results and websites that “help users find and discover products visually”.
However, it was discovered that the Superfish software was installing its own self-signed Root Certificate Authority so that the Superfish software always appears as a trusted party. The Superfish software would have the ability to then intercept supposedly-secure communications to websites via a man-in-the-middle attack. Researchers also confirmed that hackers on the same network, like an open WiFi hotspot at a coffee shop, can exploit Superfish to steal things like your banking login details or to read your emails. The good news is that Lenovo has stopped pre-loading Superfish as of January 2015. The bad news is that millions of Lenovo laptops were shipped with Superfish running on them (we don’t have a list of affected devices at this time). Superfish appears to impact Internet Explorer and Chrome on those Lenovo computers.

Take action now to protect yourself from Superfish.

You can visit this Superfish checker: https://lastpass.com/superfish/ will verify if Superfish is running on your machine and tell you whether or not your system is at risk.
Learn more about the Superfish vulnerability on lastpass blog

10 years ago

Comment has been collapsed.

Aww yiss, I'm safe :D

10 years ago
Permalink

Comment has been collapsed.

Same here. Still safe from it! ^^

10 years ago
Permalink

Comment has been collapsed.

safe :D

10 years ago
Permalink

Comment has been collapsed.

Closed 5 years ago by Ningiety.