Lenovo has definitely had better weeks. On the heels of the outcry over their inclusion of the Superfish tracking software on some computers, the company has suffered another significant public backlash. For part of the afternoon, Lenovo.com was hacked, with the site scrolling through photographs of emo teenagers while music played in the background. As of 5pm EST the site seems to be back to normal at least temporarily, but there are still some issues loading the site, and it’s entirely possible that it’s still compromised.
The Verge was able to look into the source code of the hacked page, and found references to known member of Lizard Squad:
The source code for the hacked page identified it as, “the new and improved rebranded Lenovo website featuring Ryan King and Rory Andrew Godfrey,” both of whom have been publicly identified as members of the hacker collective Lizard Squad. It’s unclear whether King and Godfrey are actually related to the hack, or if the attackers are simply using their names and photos to muddle their true identity.
As mentioned, it’s entirely possible that Lizard Squad had nothing to do with this attack, but it doesn’t seem outside the realm of possibility.
Jonathan Zdziarski, a Forensic Scientist for viaForensics noted that it appears Lenovo’s Domain Record seems to have been tampered with:
— Jonathan Zdziarski (@JZdziarski) February 25, 2015
This would allow the attackers to re-direct lenovo.com to point at another server, though it doesn’t seem to indicate that anything outside of the website appearance would have been affected.
Lenovo has not responded publicly to these attacks yet, though I’d imagine they’ve had their hands pretty full trying to regain control of their website.Source: The Verge
Featured Image Courtesy of thehackernews.com