Trusted Design

Superfish

概要

Lenovo is selling computers that come preinstalled with adware that hijacks encrypted Web sessions and may make users vulnerable to HTTPS man-in-the-middle attacks that are trivial for attackers to carry out, security researchers said. The critical threat is present on Lenovo PCs that have adware from a company called Superfish installed. As unsavory as many people find software that injects ads into Web pages, there's something much more nefarious about the Superfish package. It installs a self-signed root HTTPS certificate that can intercept encrypted traffic for every website a user visits. When a user visits an HTTPS site, the site certificate is signed and controlled by Superfish and falsely represents itself as the official website certificate.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• GootKit- Banker Malware (possibly) Botnet Attacking Italian Companies (score: 0.52)
• Web-Rewards malicious website (score: 0.52)
• Threat actor goes on a Chrome extension hijacking spree (score: 0.51)
• FinFisher surveillance campaigns: Are internet providers involved? (score: 0.51)
• PoSeidon, A Deep Dive Into Point of Sale Malware (score: 0.48)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る