A US woman is suing both Lenovo and Superfish, after the PC maker was found shipping laptops to consumers with Superfish adware pre-installed.
Security experts warn that Superfish adware leaves users vulnerable to man-in-the-middle (MitM) attacks via a self-signed root certificate, which could allow a saboteur to intercept users' encrypted SSL connections.
[Related: Lenovo website hacked, revenge for Superfish?]
Reports of the adware-laden Lenovo laptops went viral last week, around the time Jessica Bennett, of San Diego, California, filed a lawsuit against the companies in a federal court.
Earlier this week, Ars Technica published the court documents filed Thursday US time by Bennett, who seeks class-action status for the suit.
Bennett accused the firms of violating the California Invasion of Privacy Act, federal wiretap law and a state law governing unfair business competition.
The Electronic Frontier Foundation has published steps to uninstall Superfish. Lenovo stopped preloading the adware in January.
This article originally appeared at scmagazineus.com
-1.jpg&w=100&c=1&s=0)
.png&w=100&c=1&s=0)
