Hacker takes over 150,000 buggy printers

Affected printers come from HP, Brother, Epson, Canon, Lexmark, and Minolta

A hacker has managed to take over more than 150,000 networked printers including some manufactured by HP, Brother, Epson, Canon, Lexmark and Minolta.

The actor, who goes by the alias Stackoverflowin, executed a program that searched the internet to find printers that were online but didn't have basic security controls enabled.

Advertisement - Article continues below

When a printer was discovered, the program ordered the printer to alert the user by printing out a message that read, "stackoverflowin the hacker god has returned, your printer is part of a flaming botnet, operating on putin's forehead utilising BTI's (break the internet) complex infrastructure. [ASCII ART HERE] For the love of God, please close this port, skid. ------- Questions? Twitter: https://twitter.com/lmaostack."

Some earlier messages sent out to printers also included a ASCII picture of a robot or a computer, just to add a little creativity to the warning.

The attack follows the publication of a report by German researchers that highlighted printers' security holes, finding hackers could access printers' memory to rerieve sensitive documents and even passwords. Stackoverflowin's own hack serves as a stark warning to those using networked printers without having the correct security procedures in place.

Commercial printers, home printers and even receipt printers in restaurants were affected by the hack, although it doesn't seem Stackoverflowin wanted to do any harm to the victims, but rather wanted to warn them before someone else got there first and could have launched a malicious attack.

Advertisement
Advertisement - Article continues below

"I'm about helping people to fix their problem, but having a bit of fun at the same time," Stackoverflowin told Bleeping Computer. "Everyone's been cool about it and thanked me to be honest."

Featured Resources

Top 5 challenges of migrating applications to the cloud

Explore how VMware Cloud on AWS helps to address common cloud migration challenges

Download now

3 reasons why now is the time to rethink your network

Changing requirements call for new solutions

Download now

All-flash buyer’s guide

Tips for evaluating Solid-State Arrays

Download now

Enabling enterprise machine and deep learning with intelligent storage

The power of AI can only be realised through efficient and performant delivery of data

Download now
Advertisement

Recommended

Visit/security/355013/10-quick-tips-to-identifying-phishing-emails
Security

10 quick tips to identifying phishing emails

16 Mar 2020
Visit/business-strategy/mergers-and-acquisitions/354941/panda-security-to-be-acquired-by-watchguard
mergers and acquisitions

Panda Security to be acquired by WatchGuard

9 Mar 2020
Visit/security/internet-security/354417/avast-and-avg-extensions-pulled-from-chrome
internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019
Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

Visit/security/privacy/355155/zoom-kills-facebook-integration-after-data-transfer-backlash
privacy

Zoom kills Facebook integration after data transfer backlash

30 Mar 2020
Visit/infrastructure/server-storage/355118/hpe-warns-of-critical-bug-that-destroys-ssds-after-40000-hours
Server & storage

HPE warns of 'critical' bug that destroys SSDs after 40,000 hours

26 Mar 2020
Visit/security/data-breaches/355173/marriott-hit-by-data-breach-exposing-personal-data-of-52-million
data breaches

Marriott data breach exposes personal data of 5.2 million guests

31 Mar 2020
Visit/security/cyber-crime/355171/fbi-warns-of-zoom-bombing-hackers-amidst-coronavirus-usage-spike
cyber crime

FBI warns of ‘Zoom-bombing’ hackers amid coronavirus usage spike

31 Mar 2020