{"id":7603,"date":"2025-05-17T15:16:18","date_gmt":"2025-05-17T06:16:18","guid":{"rendered":"https:\/\/aireviewirush.com\/?p=7603"},"modified":"2025-05-17T15:16:18","modified_gmt":"2025-05-17T06:16:18","slug":"warning-this-printer-vendors-software-program-contained-malware","status":"publish","type":"post","link":"https:\/\/aireviewirush.com\/?p=7603","title":{"rendered":"Warning: This Printer Vendor’s Software program Contained Malware"},"content":{"rendered":"


\n<\/p>\n

\n

Should you personal a printer<\/a> from China-based Procolored, be careful: The corporate\u2019s driver information are stuffed with malware<\/a>, together with a Home windows-based backdoor.<\/p>\n

Karsten Hahn, a researcher at cybersecurity vendor G Information, reported<\/a> the findings on Thursday. “A printer firm offered contaminated printer software program for half a 12 months,” he stated.<\/p>\n

Hahn started investigating after YouTuber Cameron Coward at Serial Hobbyism<\/a> obtained a printer from Procolored, a supplier of direct-to-film printers, which can be utilized for creating customized T-shirts. Whereas testing the printer for a assessment, the built-in antivirus Home windows Defender<\/a> and Google’s Chrome browser alerted him of malware threats on his PC.\u00a0<\/p>\n

His laptop had been hit with Floxif<\/a>, a strong malware that may change\u00a0Home windows executables and set up different malicious code. It may possibly additionally unfold itself via linked USB drives. Coward\u2019s PC obtained the malware alert after putting in software program from<\/a> a ZIP folder on the \u201cUSB thumb drive Procolored equipped with the printer.\u201d<\/p>\n

Though Procolored, a Shenzhen-based firm, claimed the malware alerts have been false-positives, Coward posted<\/a> a name on Reddit for a third-party safety researcher to double-check. Hahn at G Information started investigating and traced the menace to the printer driver information hosted on Procolored’s web site.\u00a0<\/p>\n

\"The<\/p>\n

\n (Credit score: Mega.nz\/Procolored)<\/small>\n<\/p>\n

Surprisingly, Procolored continues to host the printer driver information for six merchandise on a third-party Mega.nz file sharing account. Hahn\u2019s antivirus<\/a> scan discovered that 39 of the information triggered two malware detections: One for a cryptocurrency pockets stealer, the opposite a backdoor for Home windows PCs dubbed XRed.\u00a0\u00a0<\/p>\n

\n

<\/p>\n

\n Get Our Finest Tales!<\/span>\n <\/p>\n

\n <\/p>\n
\n <\/p>\n
\n
\n \"Newsletter<\/p>\n


\n <\/p>\n

<\/p>\n

\n
\n

Table of Contents<\/p>\n