By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
10alert.com10alert.com10alert.com
  • Threats
    • WordPress ThreatsDanger
    Threats
    A cyber or cybersecurity threat is a malicious act that seeks to damage data, steal data, or disrupt digital life in general. Cyber threats include…
    Show More
    Top News
    What is an Exploit? -Kaspersky Daily
    12 months ago
    Darkhotel APT in luxury Asian hotels
    12 months ago
    Kaspersky Lab expert Andrey Pozhogin answers questions about ransomware
    12 months ago
    Latest News
    Two privilege escalation vulnerability in Simple Membership Plugin
    11 hours ago
    Wordfence Intelligence Weekly WordPress Vulnerability Report (September 11, 2023 to September 17, 2023)
    7 days ago
    Exploring Winrar Vulnerability (CVE-2023-38831) | McAfee Blog
    1 week ago
    Two PHP Object Injection Vulnerabilities Fixed in Essential Blocks
    1 week ago
  • Fix
    Fix
    Troubleshooting guide you need when errors, bugs or technical glitches might ruin your digital experience.
    Show More
    Top News
    Keylogger found on 5500 sites running WordPress
    Keylogger found on 5500 sites running WordPress
    12 months ago
    Windows 11 build 22622.575 (KB5016694) releases in the Beta Channel
    12 months ago
    How to create restore point on Windows 11
    12 months ago
    Latest News
    How automatically delete unused files from my Downloads folder?
    7 months ago
    Now you can speed up any video in your browser
    7 months ago
    How to restore access to a file after EFS or view it on another computer?
    8 months ago
    18 Proven Tips to Speed Up Your WordPress Site and Improve SEO | 2023 Guide
    8 months ago
  • How To
    How ToShow More
    How to get the latest Windows 11 innovations
    14 hours ago
    Dynamic Lighting is now available on Windows 11
    14 hours ago
    Writing poems using LLama 2 on Workers AI
    Writing poems using LLama 2 on Workers AI
    14 hours ago
    serverless GPU-powered inference on Cloudflare’s global network
    serverless GPU-powered inference on Cloudflare’s global network
    14 hours ago
    You can now use WebGPU in Cloudflare Workers
    You can now use WebGPU in Cloudflare Workers
    14 hours ago
  • News
    News
    This category of resources includes the latest technology news and updates, covering a wide range of topics and innovations in the tech industry. From new…
    Show More
    Top News
    Telegram update
    11 months ago
    How to optimize USB flash drive in Windows 10?
    11 months ago
    Service for punching a username by domains and social networks. networks
    11 months ago
    Latest News
    How to install September 2023 update with 23H2 features for Windows 11
    19 hours ago
    How to uninstall September update (KB5030310) from Windows 11
    19 hours ago
    How to remove the quiet mode icon in the corner of the iPhone 15 screen ProiPhone 15 Pro and iPhone
    2 days ago
    Sberbank has figured out how to effectively catch scammers – it will listen to everything you
    2 days ago
  • Glossary
  • My Bookmarks
Reading: Printers gone mad
Share
Notification Show More
Aa
Aa
10alert.com10alert.com
  • Threats
  • Fix
  • How To
  • News
  • Glossary
  • My Bookmarks
  • Threats
    • WordPress ThreatsDanger
  • Fix
  • How To
  • News
  • Glossary
  • My Bookmarks
Follow US
Threats

Printers gone mad

Tom Grant
Last updated: 13 October
Tom Grant 4 years ago
Share
6 Min Read

One quiet evening, you suddenly hear a sound. It’s the printer in the next room, and it’s furiously printing something no one requested. You take a look and see that it’s printed a leaflet urging you to subscribe to a well-known YouTube channel.

Contents
Printers like PewDiePiePartisan printer marketingA brief history of printer attacksHow to prevent your printer from going postal

A few hours later, the printer suddenly spits out an ad from a company promising to advertise goods through printers, and then starts incessantly printing all kinds of gobbledygook, mostly of extremely dubious content. What the hell is going on? Your printer’s been hacked, that’s what. And not only yours.

Printers like PewDiePie

The above case is real, and quite recent: Last week 50,000 printers worldwide suddenly became fans of PewDiePie, the youtuber in question. One of them was even a receipt printer at a police station, which probably raised a few eyebrows.

Here’s how it happened: Somewhere, a hacker was bored — and a bored hacker means trouble. It seems he had just spent four hours playing Destiny 2 nonstop. If you’ve ever played this game, you can imagine his frame of mind. After Destiny 2-ing, he was itching to hack something, and with that in mind, he logged into Shodan, a service that allows you to search for Internet-connected devices, also known as the world’s first search engine for the Internet of Things.

The hacker decided that he would target printers and get them to print something funny (in his opinion), and so that’s what he did. According to the hacker (who told the whole story himself on Twitter, where his handle is @HackerGiraffe), he skimmed through the available information on printer protocols and the corresponding ports, and then looked for the ports on Shodan. There, he discovered more than 800,000 devices online with these ports open. He selected the first 50,000.

He decided it would be funny to print a leaflet in support of famous vlogger PewDiePie, whose YouTube channel is in a battle with another channel, T-Series, for the title of most popular in the world. The message urged recipients to subscribe to PewDiePie and unsubscribe from T-Series.

In the wilds of the Internet, the hacker found a program for hacking printers, wrote a simple script to run the hacking tool and send a command to the printers to print the leaflet, and then executed the script. As a result, 50,000 printers worldwide churned out the following:

@pewdiepie this just came through the ticket printer for the police station next door #savepewdiepie pic.twitter.com/7cGX3VmUIt

— Ham the God Glorp (@Hlt_tm) November 27, 2018

Partisan printer marketing

Such news could hardly be missed by the media — and soon millions of people around the world knew that hundreds of thousands of printers were hijackable.

They included some enterprising minds, who promptly set up an agency offering to print ads on other people’s printers — apparently using the same method employed by @HackerGiraffe, after he kindly tweeted how to do it.

To illustrate the service, information about the agency was disseminated through the same printers as before (the owners of which must have been delighted, especially the police station). The advertising brochures dropping into the printer trays boasted that the agency could hack absolutely any printer in the world. That’s probably a slight exaggeration: If they use the very technique described by @HackerGiraffe, they can reach only network printers.

A brief history of printer attacks

In fact, attacks on printers are nothing new, and it is somewhat surprising that the idea has only recently entered the mainstream. Back in the fax age, for example, fax spam was popular with all kinds of mischief-makers eager to distribute ads and other materials by fax. In 1991, a law was passed in the US to prohibit the practice, which also coincided with a general decline in faxes worldwide (although you won’t believe in which country they are still alive and kicking!).

Speaking of printers, in 2008 researcher Aaron Weaver published an article describing how a Web page can be created for launching print jobs on any visitors’ printers. There have also been cases of mass attacks on printers — for example, in 2016 a hacker hacked network printers at more than a dozen US colleges and printed racist leaflets on them.

How to prevent your printer from going postal

Most users probably don’t need their printer to be hooked up to the Internet. And only network printers can be hacked using the method described above, so it is better simply to disconnect your printer from the Internet, in which case it will still be accessible through the local network.

  • Disable any printer settings that involve printing over the Internet.
  • Change your username and password (if your printer uses login credentials); never keep the default values.
  • Close router ports 9100, 515, and 721–731. See your router’s user manual to find out how.
  • Turn off your printer when it’s not in use.

Source: kaspersky.com

Translate this article

TAGGED: Port scanning, Split tunneling, Threats, YouTube
Tom Grant October 13, 2022 September 30, 2019
Share This Article
Facebook Twitter Reddit Telegram Email Copy Link Print

STAY CONECTED

24.8k Followers Like
253.9k Followers Follow
33.7k Subscribers Subscribe
124.8k Members Follow

LAST 10 ALERT

Two privilege escalation vulnerability in Simple Membership Plugin
Two privilege escalation vulnerability in Simple Membership Plugin
Wordpress Threats 14 hours ago
How to get the latest Windows 11 innovations
Windows 14 hours ago
Dynamic Lighting is now available on Windows 11
Windows 14 hours ago
Writing poems using LLama 2 on Workers AI
Writing poems using LLama 2 on Workers AI
Apps 14 hours ago
serverless GPU-powered inference on Cloudflare’s global network
serverless GPU-powered inference on Cloudflare’s global network
Apps 14 hours ago

You Might Also Like

Two privilege escalation vulnerability in Simple Membership Plugin
Wordpress Threats

Two privilege escalation vulnerability in Simple Membership Plugin

14 hours ago
You can now use WebGPU in Cloudflare Workers
Apps

You can now use WebGPU in Cloudflare Workers

14 hours ago
Suddenly: iPhone SE 4 will disrupt the market and make you forget about iPhone 15 Future “budget”
News

Suddenly: iPhone SE 4 will disrupt the market and make you forget about iPhone 15 Future “budget”

2 days ago
Nothing released the first smart watches and other gadgets under the CMF brand.  Cost a penny
News

Nothing released the first smart watches and other gadgets under the CMF brand. Cost a penny

2 days ago
Show More

Related stories

How to upgrade to Windows 11 23H2 with Installation Assistant
Critical Vulnerability in Forminator Plugin
How to blur image background in Photos for Windows 11
How to download official Windows 11 23H2 ISO file
PHP Object Injection Vulnerability in Flatsome Theme
How to download Windows 11 22H2 ISO after 23H2 releases
Previous Next

10 New Stories

You can now use WebGPU in Cloudflare Workers
How to install September 2023 update with 23H2 features for Windows 11
How to uninstall September update (KB5030310) from Windows 11
Traffic anomalies and notifications with Cloudflare Radar
Sippy helps you avoid egress fees while incrementally migrating data from S3 to R2
the modern way to connect and protect your clouds, networks, applications and users
Previous Next
Hot News
Two privilege escalation vulnerability in Simple Membership Plugin
How to get the latest Windows 11 innovations
Dynamic Lighting is now available on Windows 11
Writing poems using LLama 2 on Workers AI
serverless GPU-powered inference on Cloudflare’s global network
10alert.com10alert.com
Follow US
© 10 Alert Network. All Rights Reserved.
  • Privacy Policy
  • Contact
  • Customize Interests
  • My Bookmarks
  • Glossary
Go to mobile version
adbanner
AdBlock Detected
Our site is an advertising supported site. Please whitelist to support our site.
Okay, I'll Whitelist
Welcome Back!

Sign in to your account

Lost your password?