Dell's preinstalled software left PCs open to hacking

In another example of a familiar problem, Bill Demirkapi discovered a vulnerability in the support software that Dell installs on most of its new computers. His method uses the SupportAssist software – designed to easily update drivers, adjust settings, and clean up unused files – by allowing an attacker to remotely install malware. It should be noted, however, that this would require the attacker to be on the same local network as his / her victim and that the victim consults an attacker-controlled website.

Writing the problem explains its operation and its fault-finding process after replacing its old MacBook Pro with a Dell G3 gaming laptop. It also details its timing since the discovery of the problem in October until Dell can solve it earlier this year. At this point, Dell PC owners using Windows should check if they have installed SupportAssist and, if so, make sure that it has been updated to version 3.2.0.90 or later (the latest version is 3.2.1).