EFF: SSL Records Show Superfish Attacks in the Wild

EFF researchers report evidence of active man-in-the-middle attacks abusing the Komodia SSL-interception library (used by Superfish/Lenovo), identifying ~1,600 mismatched SSL certificates tied to high-profile domains (Google, Yahoo, major banks, e-commerce). The weakness could allow attackers to intercept encrypted traffic, access accounts, and install malware; EFF warns vendors against intercepting customers' encrypted traffic.