Computrace

Aliases: lojack

First seen
2014-01-01 00:00:00
Malware type
spyware, rootkit
Family
Malware family
Profile updated
2026-07-07 14:31:18

Targeted industries: government-and-public-sector technology-and-telecommunications

Context

Computrace, also known as LoJack, is a persistence-oriented spyware that is pre-installed on many commercial laptops and desktops. It is designed to help authorities recover stolen devices but has been misused to control and spy on systems remotely without user knowledge.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Computrace_Auto (yara-rule)

Reports & references

  • secureworks.com — Iron Twilight (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Computrace (report)
  • asert.arbornetworks.com — Lojack Becomes A Double Agent (report)
  • lastline.com — Apt28 Rollercoaster The Lowdown On Hijacked Lojack (report)
  • bartblaze.blogspot.de — Thoughts On Absolute Computrace (report)

External references