Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The 2018 report was about attackers repurposing an older version of Computrace/LoJack, a legitimate laptop anti-theft service with a firmware-assisted persistence mechanism. Arbor Networks researchers attributed the activity to APT28 (also known as Fancy Bear) and said the modified agent redirected its normal connection to attacker-controlled infrastructure. That did not prove that every laptop was compromised, that the firmware module itself was malicious, or that current Absolute software remains vulnerable to the same technique.

What Computrace and LoJack were designed to do

Computrace, marketed as LoJack for Laptops and now associated with Absolute, was built to help locate, manage and recover stolen computers. Its unusual feature was persistence: a component could be included in a supported computer’s manufacturer firmware, allowing an installed agent to survive common operating-system replacement or disk changes.

That design created a trusted foothold for recovery software, not proof of malware. The security concern was that an attacker who could alter or hijack the agent’s communications might gain an unusually durable position on a device.

Firmware presence is not the same as activation

Absolute’s current consumer FAQ separates three conditions that are often conflated:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Full Metal Laptop Security Lock – Adjustable Laptop Locking Station for MacBook & Surface (12-18”), Laptop Desk Mount with 2 Keys
  • All-Metal Build – This laptop security lock features solid full metal construction for maximum strength and tamper resistance. A reliable laptop security holder for long-term use in public spaces
  • Fits 12-18” Laptops – Adjustable width works with MacBook, Surface, and more. This versatile laptop locking station securely holds a wide range of devices
  • Key Lock with 2 Keys – The built-in key mechanism keeps your laptop locked to desk. An ideal laptop desk mount for shared workspaces where security matters
  • Screen Protection – Soft padding on the middle and both sides protects your laptop screen from scratches. A thoughtful design that makes this laptop lock both safe and gentle.
  • Versatile Use – Perfect for schools, libraries, corporate meeting rooms, exhibition halls and open offices. Easy to mount with included screws – your go-to laptop security lock for peace of mind
  • A compatible computer may contain an Absolute Persistence Technology module in its manufacturer firmware.
  • The module may exist while no Absolute software agent is installed or active.
  • Persistence is activated when the relevant software is installed; an unsupported computer cannot have the embedded module added later.

Consequently, seeing a Computrace or Absolute entry in firmware or BIOS is not, by itself, evidence that the laptop is tracking its owner or has been compromised.

What the 2018 APT28 report alleged

Arbor Networks’ 2018 research, reported by CyberScoop on May 10, said APT28 had modified an older LoJack agent and redirected the connection that agent normally made to its external command-and-control service. The researchers described the redirection as a man-in-the-middle-style operation and placed it in an espionage context.

APT28 and Fancy Bear are names used for the same threat actor in this reporting. The attribution is Arbor’s research assessment, not an independently adjudicated finding presented by the sources as a court-tested fact.

Rank #2
Sale
Kensington Combination Cable T-Bar Standard Lock Slot for Laptops, Resettable 4 digit password with 6 Foot Cable, K64673AM
  • Computer lock for HP, Lenovo, Acer, Asus and other brands; not compatible with Dell or Alienware (see part # K68008WW)
  • Resettable 4-wheel Number code with 10, 000 possible combinations. Push-button design for one-handed engagement to easily attach lock
  • 6’ long carbon steel cable is cut-resistant and anchors to desks, tables, or any fixed structure
  • Attaches to laptops, desktops, TVs, monitors, hard drives, docking stations, projectors or any other device featuring a Kensington standard size security slot
  • Independently verified and tested for industry-leading standards in torque/pull, foreign implements, lock lifecycle, corrosion, key strength and other environmental condition

Why a legitimate recovery agent was attractive

A recovery product that is trusted by the operating system, expected to persist, and allowed to communicate externally can be more useful to an attacker than ordinary malware. Arbor threat researcher Richard Hummel told CyberScoop: “The most notable aspect of using this software and the minute changes made to the C2 mean that it evades many anti-virus and host-based threat scanners.”

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The important distinction is that the reported operation did not require Computrace to have been created as a hacking tool. It involved modifying an older agent and using its trusted deployment and communications path for a different purpose.

What Kaspersky found before the APT28 report

Kaspersky’s work began after researchers found Computrace active on privately owned laptops without their authorization. Its February 2014 FAQ said the team observed signs of unauthorized activation, examined weaknesses in the agent’s protocol, and demonstrated a live hijack at the 2014 Security Analyst Summit.

Rank #3
Sale
I3C Laptop Cable Lock, Hardware Security Cable Lock with Keys, Anti Theft Combination Lock Compatible with Laptop Monitor Tablet Surface Projector and Other Electronic Devices (1 Pack)
  • 🎁FIT FOR ALL THE TABLETS: 🎁With an anchor plate, The Hardware cable lock fits for Mac Book and all the Tablets, Smart Phones, such as for iPad, Microsoft Surface, Kindle, Samsung, Android Tablets and phones, etc
  • 🎁FIT FOR MOST THE LAPTOPS: 🎁With standard lock, the security cable lock also fits for most laptops that have Standard slots.
  • 🎁HOW TO USE: 🎁For Tablets/Laptops without standard lock slot: Bound the anchor plate, which is lined with strong adhesive, to the hard surface of the devices, then insert the locking head into the plate with keys and loop the cable around a fixed object. FOR LAPTOPS WITH LOCK SLOT, just simply insert the lock head into the slot, and loop the cable around a fixed object
  • 🎁ANTI THEFT: 🎁The lock head is made of super-strong stainless steel, can be rotated in 360 degrees. The cable is made of cut-resistant twisted steel with a PVC coat, the extra length of 6.5ft fully meets your daily demands
  • 🎁MODEL TIPS-- 🎁There are some Models need to be used with I3C Adhesive Security Plate, if you mind using I3C anchor plate, please buy it berofe thinking twice

Scope and limits of the 2014 testing

The details matter:

  • The laptops studied were new devices purchased in 2012.
  • The demonstration agent had been compiled in 2012.
  • Kaspersky said it had confirmed the vulnerability in the Windows agent.
  • The researchers had not analyzed or confirmed the same issue on other platforms.

Those observations were a research finding about specific software and test conditions, not a conclusion that every laptop, every operating system, or every Computrace installation was affected.

Vitaly Kamluk, who led the Kaspersky work, described the 2014 issue to CyberScoop this way: “The agent lacked a digital signature and could be modified by anyone. Also it’s communication could be hijacked by a MiTM [man-in-the-middle] attack or tampered registry value which would lead to RCE (remote code execution) as user system.”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How the 2018 reporting, vendor response and evidence fit together

Period What was reported What it does not establish
2012–2014 Kaspersky investigated unauthorized activation and demonstrated a Windows-agent hijack using older equipment and a 2012-built agent. It was not a current, cross-platform security assessment.
2018 Arbor said APT28 had modified an older LoJack agent and redirected its command-and-control connection. It does not show that all Computrace-equipped laptops were targeted or compromised.
Absolute’s 2018 response Absolute said the samples supplied by Arbor were modified 2008-era binaries, that it had patched the issue after reviewing Kaspersky’s 2014 work, and that it knew of no incidents based on that research. These are the company’s statements, not independent proof that every newer version was secure.
Researchers’ 2018 limitation CyberScoop reported that the researchers interviewed had not reverse-engineered newer versions. The available reporting could not confirm the security of the latest iterations at that time.

Absolute spokesperson told CyberScoop: “Nothing is more important to us than the security of our customers, and the idea that someone could maliciously use our old technology is deeply concerning. We are taking every precaution to ensure any issues are immediately addressed.”

Rank #4
Kensington Combination Laptop Lock for Standard Security Slot, Resettable (K60213WW), Black
  • 5-Foot (1.5m) Carbon Steel Cable - Resists cutting attempts and provides ample length for easily anchoring your laptop to desks, tables, and other attachment points. Incorporates anti-shearing plastic sleeve to protect surfaces
  • Slim Lock Head - Designed to support thin laptops using standard lock slots, lock secures while allowing your device to lie flat and stable
  • Resettable 4-Wheel Number Code - Set or reset your personal number code from 10,000 possible combinations
  • Pivoting Head and Rotating Anchor - The lock tip rotates 360º and the cable rotates up to 90º—allowing access to the ports near the lock slot on most devices and providing a convenient locking and unlocking experience
  • One-Handed Attachment - Convenient slider allows for quick and easy attachment to the laptop with one hand

What the current Absolute guidance means

Absolute’s current support material still describes Computrace, also called Absolute Persistence Technology, as a component of Absolute Home & Office on compatible devices. The vendor’s model remains that firmware can carry the persistence module while software activation is a separate event.

A separate firmware advisory

Absolute’s current security notice addresses a different, specific condition: some computers with security firmware older than version 2.8 may be affected when Absolute software has never been activated. The notice directs users to check their device and follow the manufacturer’s update process or use the free product offered by the vendor.

That advisory should not automatically be treated as the 2018 APT28 hijack. It concerns stated firmware versions and activation conditions, whereas the 2018 reporting concerned an older agent and redirected communications.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
AboveTEK MacBook & Surface Laptop Locking Station with Combo Lock Cable, Anti Theft Folding Security Laptop Desk Mount, Adjustable & Portable, Fits 12"-16" Laptops/Notebooks (Black)
  • Universal Fit for Diverse Laptops: Our AboveTEK Locking Station is designed to fit a wide range of laptops from 12" to 16", including MacBook, MacBook Air, Surface Pro and Chromebooks. Its adjustable arms accommodate widths from 11.1" to 15.7", ensuring compatibility with various models
  • Enhanced Security with Keyed Lock and Long Cable: The AboveTEK MacBook locking comes with a keyed laptop lock and a lengthy 78.7-inch (2m) cable, ideal for securely tethering to any fixed structure. It also includes mounting options for desk attachment, ensuring your laptop stays safe and secure.
  • Flexible Viewing and Usage: Equipped with a pivot hinge, our laptop locks and security cables allows for 45° to 125° viewing angles, offering unmatched flexibility in laptop positioning. This feature is ideal for users who value both security and ergonomic comfort.
  • Robust and Heat-Dissipating Construction: Built with durable zinc alloy and ABS, our laptop security lock station is designed for longevity. The non-slip surface ensures stability, while its heat-dissipating properties keep your laptop cool during prolonged use.
  • Lightweight, Versatile Security:Net weight At only 0.94lb (427g), the AboveTEK Computer Lock offers both portability and robust security. Equipped with dual lock clips (6.8mm & 9.8mm) for various laptop thicknesses, it ensures a secure fit. Ideal for protecting devices in public areas like coffee shops and libraries, it's the perfect blend of convenience and safety.

Vendor scale claims need context

In a 2026 announcement, Absolute said its firmware-embedded persistence technology is present on more than 600 million endpoint devices. That is a vendor-published marketing figure, not an independently validated statistic, and it cannot be used to prove that the historical software was either secure or insecure.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What to do if your laptop shows Computrace or Absolute

Do not remove firmware or install a generic “BIOS cleaner” solely because a Computrace entry appears. Use a device-specific process:

  1. Identify the exact computer model and firmware version. Record the manufacturer, model or service tag, BIOS/UEFI version and any Absolute or Computrace status shown in firmware or the operating system.
  2. Check whether Absolute software was ever activated. A firmware module can be present without an installed or active agent.
  3. Read the manufacturer’s current support instructions. Determine whether a firmware update is available for that exact model.
  4. Compare the device with Absolute’s current security notice. Pay particular attention to the stated security-firmware version and the condition concerning software that has never been activated.
  5. Contact the manufacturer or Absolute for device-specific guidance. Keep purchase, ownership and activation details available if support asks for them.
  6. If compromise is suspected, use your organization’s incident-response process. Preserve logs and system images before changing firmware or reinstalling software; a routine antivirus scan is not a substitute for forensic review of a suspected firmware or agent issue.

The published material does not support recommending a universal BIOS-removal utility or a particular antivirus product as a fix for the historical issue.

Why the “supply-chain” label can mislead

The phrase “buried in the supply chain of laptops” captures why firmware-associated software drew attention: the capability could be delivered as part of a manufacturer-supported device rather than downloaded as obvious malware. But the phrase should not be read as proof that laptop manufacturers knowingly shipped a malicious implant.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In the documented account, the underlying product was legitimate, the firmware component could be inactive, and the reported abuse involved an older agent that researchers said had been modified. Those distinctions are essential when assessing an individual computer today.

What is established—and what remains unproven

  • Established in the cited reporting: Computrace/LoJack was a legitimate anti-theft and recovery product with firmware-assisted persistence; Kaspersky reported unauthorized activation and a Windows-agent hijack in older research; Arbor attributed a modified-agent operation to APT28; and CyberScoop reported Absolute’s 2018 patch and no-known-incidents statements.
  • Not established by that reporting: that every laptop with a Computrace firmware module was compromised, that every operating system was affected, or that the current product has the same flaw.
  • Current practical point: firmware presence, software activation and an active security incident are separate questions. Resolve them using the exact device model, firmware version and current manufacturer or Absolute instructions.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.