Dell web address swiped by third party

  • Published
Dell logoImage source, Getty Images
Image caption,

The domain name was checked regularly by software installed as standard on many Dell PCs

A web address used by recovery software on Dell PCs was taken over by a third-party after a contractor apparently failed to renew it.

The software checks the domain periodically, so whoever snapped it up could have distributed malware through it.

Security expert and author Brian Krebs - who first reported the issue - believed there was a possibility that this happened, external.

Dell says no malware was transferred.

Dell's Backup and Recovery Application software is installed by default on many of the firm's PCs and allows users to restore their computers to factory settings, in the event of problems.

The software would download updates from Dellbackupandrecoverycloudstorage.com.

The domain name used to be controlled by US-based tech firm SoftThinks, but was taken over by another party between June and July this year.

"Approximately two weeks after Dell's contractor lost control over the domain, the server it was hosted on started showing up in malware alerts," Mr Krebs said in his blog.

In a statement, Dell admitted it had lost control of the domain name but said the problem has now been "addressed".

It added: "We do not believe that the Dell Backup and Recovery calls to the URL during the period in question resulted in the transfer of information to or from the site, including the transfer of malware to any user device."

The BBC has contacted SoftThinks for comment.