Dell Laptops Infected with ‘Superfish-Like’ Pre-installed Malware | Information Security



After the Superfish Malware that attacked Lenovo laptops this February, another big computer manufacturer Dell’s PCs and laptops are reportedly found to have been pre-installed with a rogue SSL certificate that could allow attacks. It lets an attacker easily impersonate as a HTTPS-protected website and spy on when banking or shopping online. The rogue certificate, dubbed eDellRoot, was first discovered over the weekend. The certificate automatically re-installs itself even when removed from the Windows operating system.Superfish 2.0: Unkillable Zombie

The self-signed transport layer security (TLS) credential came pre-installed as a root certificate on Dell PCs and laptops that are signed with the same private cryptography key, which is stored locally.

Previous
Next Post »