Lenovo was hacked on Wednesday, its website defaced and email accounts commandeered by hackers purporting to be the Lizard Squad. The notorious hacking group is known for taking over high-profile targets such as Microsoft’s Xbox Live gaming service and Malaysia Airlines’ website.
Lenovo.com was hacked to stream the song “Breaking Free” from the Disney movie “High School Musical,” along with a slideshow of images that, when clicked, led to a Twitter account criticizing the manufacture for its involvement with Superfish. According to The Verge, code for the site was changed to identify it as “the new and improved rebranded Lenovo website featuring Ryan King and Rory Andrew Godfrey," two members of Lizard Squad outed by investigative journalist and cybersecurity expert Brian Krebs.
It was not immediately clear whether the hackers were falsely naming King and Godfrey, or if the pair actually took part in the attack. A Twitter account identifying itself as belonging to Lizard Squad claimed further “mischief” was in store.
Expect more lizard mischief soon.
â€” Lizard Squad (@LizardCircle) February 25, 2015
The hack comes as Lenovo is under public and federal scrutiny for preloading a number of its PCs with Superfish, an adware program capable of breaking encryption and injecting rogue advertisements into Web browsers. The U.S. government has said that Superfish is dangerous spyware that offered hackers an easy path into consumers' private computers, and Lenovo already faces one class-action suit over its use.
The hackers were also able to gain access to Lenovo.com email accounts, according to Ars Technica. A Lenovo spokesperson said the “domain name server” that hosts its website had been hacked.