Lenovo.com has been hacked, possibly by Lizard Squad
Russell Brandom / The Verge :
Context & Ripple Effects
The defacement of Lenovo.com lands at the worst possible moment for the company: it follows within a week of the Superfish man-in-the-middle adware discovery on its notebooks and the finding that SSL-busting code from that episode appears in a dozen other apps, so an attacker hitting the company's own storefront reads as retaliation for its security practices.
Attribution points to Lizard Squad, whose recent record includes the January hack of Malaysia Airlines' site and a paid LizardStresser DDoS service — though the follow-on reporting blames registrar Webnic for the domain hijack affecting Lenovo and Google Domains, complicating the picture.
First-order effects
- Visitors to Lenovo.com are locked out of the company's storefront during an active reputational crisis over pre-installed software, forcing Lenovo to fight a trust problem on two fronts at once.
- Lizard Squad gains publicity for the claimed hit regardless of whether it executed the hijack itself, since the group's name attaches to the story either way.
Second-order effects
- Attention shifts from the hackers to the supply chain: Krebs on Security's reporting pins the hijack on registrar Webnic, meaning Google Domains was exposed by the same weakness and registrars face scrutiny over account and DNS controls.
- Rival PC makers can position themselves against Lenovo's compounding security failures, while the Superfish fallout spreads beyond Lenovo as the SSL-busting code turns up in third-party apps.
Third-order effects
- If the pattern holds, corporate domain registrars become the soft target of choice — attackers no longer need to breach a company's servers when hijacking its DNS achieves the same defacement and outage.
- Hacktivist-style groups increasingly time their attacks to coincide with corporate security scandals, converting another company's bad week into their own marketing, as Lizard Squad did with Malaysia Airlines after its PSN and Xbox Live campaigns.
The trend: Domain hijacking via registrars is emerging as a low-effort alternative to direct intrusion, letting groups like Lizard Squad weaponize corporate security scandals for maximum visibility.