SSL-busting code that threatened Lenovo users found in a dozen more apps

  • 22 February 2015
  • 1 reply
  • 190 views

Userlevel 7
Badge +54

"What all these applications have in common is that they make people less secure."

by Dan Goodin - Feb 22, 2015
 
http://cdn.arstechnica.net/wp-content/uploads/2015/02/busted-lock-640x480.png
 
The list of software known to use the same HTTPS-breaking technology recently found preinstalled on Lenovo laptops has risen dramatically with the discovery of at least 12 new titles, including one that's categorized as a malicious trojan by a major antivirus provider.
 
Trojan.Nurjax, a malicious program Symantec discovered in December, hijacks the Web browsers of compromised computers and may download additional threats. According to a blog post published Friday by a security researcher from Facebook, Nurjax is one such example of newly found software that incorporates HTTPS-defeating code from an Israeli company called Komodia. Combined with the Superfish ad-injecting software preinstalled on some Lenovo computers and three additional applications that came to light shortly after that revelation, there are now 14 known apps that use Komodia technology.
 
Full Article

1 reply

Userlevel 7
Does webroot detect this software, and what name does it detect it as?

Reply