Hackers Now Likely to Set Your Printer on Fire from Afar, Researchers

HammerHead

Really Senior
Guru
Gold Member
VIP
Local time
5:46 PM
Messages
1,964
Location
Ohio (From WV)

My Computer My Computer

At a glance

win 7 X64 Ultimate SP1I3770KG Skill F3-14900CL9-4GBXL x 4NVIDIA GeForce GTX670 + Intel 4000
Computer Manufacturer/Model Number
BGC (Bob's Garage Crew)
OS
win 7 X64 Ultimate SP1
CPU
I3770K
Motherboard
Asus P8Z77-V Deluxe
Memory
G Skill F3-14900CL9-4GBXL x 4
Graphics Card(s)
NVIDIA GeForce GTX670 + Intel 4000
Sound Card
Realtek HD 5.1 (MOB)
Monitor(s) Displays
Asus VW224T (1)
Screen Resolution
1920 x 1080
Hard Drives
SATA Corsair Force GT 2.5" 180GB (System) Sata 3
OCZ Vertex3 120GB
OCZ Vertex 2 120GB 2.5" SATA II
ST31000524AS 1000.2GB
WD15EARS (External)
PSU
CoolerMaster 1000 Watt
Case
CoolerMaster HAF X
Cooling
CPU -- CoolerMaster 520N
Keyboard
MS Wireless 3000 V2
Mouse
MS Wireless 3000 V2
Internet Speed
Cable
Antivirus
Norton Internet Security
Browser
IE9
Other Info
AMI Bios 1805
OC'd 3%
Like the article said, the high majority of printers are on a local network and not "on the Internet)
so the chances for infection of your local printer is pretty slim.

rich
 

My Computer My Computer

At a glance

Windows 7 Pro x64 SP1Intel Core I716 GigsNVIDIA GeForce GTX 670M
Computer type
Laptop
Computer Manufacturer/Model Number
Toshiba Laptop Qosimo X870
OS
Windows 7 Pro x64 SP1
CPU
Intel Core I7
Motherboard
Toshiba Qosmio
Memory
16 Gigs
Graphics Card(s)
NVIDIA GeForce GTX 670M
Monitor(s) Displays
17.7" laptop
Screen Resolution
1600 x 900
Hard Drives
256 Gig SanDisk SSD for C
256 Gig Intel SSD for D
Internet Speed
50/25 FIOS
Antivirus
Vipre (all you can eat for 10 machines)
Browser
IE and FF
Other Info
I have dos 6.22, wfwg 3.11, win98, 2000 and xp VHD's available for testing. MS's Virtual PC works great.
Not only could a hacker from the opposite side of the globe take control of your printer and issue instructions that could ultimately set the thing on fire, but it's very likely to happen, along with a host of other misdeeds, and it's all thanks to a new class of computer security flaws that has the potential to wreak havoc with businesses, with consumers, and yes, government agencies too.

Researchers at Columbia University told MSNBC about the recently discovered security flaws that cyber crooks can use to remotely control computer printers over the Internet, even ones sitting behind an otherwise secure network. The flaw applies to Hewlett-Packard's LaserJet printer lines, and maybe other models as well. One of the things that's particularly alarming about this is that there's no way to tell if the flaw's been exploited.

Read more at:
Maximum PC | Hackers Now Likely to Set Your Printer on Fire from Afar, Researchers Warn
 

My Computer My Computer

At a glance

64-bit Windows 11 Pro for WorkstationsIntel i7-8700K OC'd to 5 GHz64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600...ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Self built custom
OS
64-bit Windows 11 Pro for Workstations
CPU
Intel i7-8700K OC'd to 5 GHz
Motherboard
ASUS ROG Maximus XI Formula Z390
Memory
64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz
Graphics Card(s)
ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
Sound Card
Integrated
Monitor(s) Displays
2 x Samsung Odyssey G7 27"
Screen Resolution
2560x1440
Hard Drives
1TB Samsung 990 PRO M.2,
4TB Samsung 990 PRO PRO M.2,
TerraMaster F8 SSD Plus NAS
PSU
Seasonic Prime Titanium 850W
Case
Thermaltake Core P3
Cooling
Corsair Hydro H115i
Keyboard
Logitech wireless K800
Mouse
Logitech MX Master 4
Internet Speed
2 Gb/s Download and 100 Mb/s Upload
Antivirus
Malwarebyte Anti-Malware Premium
Browser
Google Chrome
Other Info
Logitech Z625 speaker system,
Logitech BRIO 4K Pro webcam,
HP Color LaserJet Pro MFP M477fdn,
APC SMART-UPS RT 1000 XL - SURT1000XLI,
Galaxy S23 Plus phone
If I understood, the problem is with laser printers, therefore I will stick with my old inkjet.
 

My Computer My Computer

At a glance

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCEPhenom II 1090T w/Noctua NH-D14 /**4400+ X2 w...2 x 2GB Patriot PGS34g1600LLKA/**4x1GB Corsai...EVGA GTX460 SC/**EVGA 8800GTS
Computer Manufacturer/Model Number
DIY
OS
W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE
CPU
Phenom II 1090T w/Noctua NH-D14 /**4400+ X2 w/CM Hyper TX 3
Motherboard
ASRock 890FX Deluxe 4/**A8N-SLI
Memory
2 x 2GB Patriot PGS34g1600LLKA/**4x1GB Corsair VS
Graphics Card(s)
EVGA GTX460 SC/**EVGA 8800GTS
Sound Card
Asus Xonar D2X/**Xonar D1
Monitor(s) Displays
Acer X233H, Dell E152FPc /**LG M237-WD
Screen Resolution
1920x1080 & 1024x768/**1980x1080
Hard Drives
WDC 2TB, 1.5TB, 1TB, 500GB,Seagate 500GB , Maxtor 80GB /**500GB Seagate & WDC 1TB Black
PSU
CM RS600 w/ APC BX1000G/**Antec 500 TP w/ APC BX1000
Case
HAF922/**Antec 1040IIB
Cooling
3x200mm, 1x140 and 1x120mm/**5x80mm fans
Keyboard
Logitech Media USB/**Saitek Eclipse
Mouse
Cordless Trackman Wheel/**Ditto
Internet Speed
3.3Mbps
Other Info
SB 560 5.1 w/ Sennheiser RS140/**Creative T20 speakers, Dvico FusionHDTV7 Gold RT, Cisco E3000, HP 5510V AIO, Linksys E3000, Belkin F5U237 hub and **F5D8055 adapter
(** = 2nd rig)
Tens of millions of HP LaserJet printers vulnerable to remote hacking

It seems, though HP is yet to confirm it, that researchers from Columbia University have found a security hole in “tens of millions” of HP LaserJet printers that allows a remote hacker to install new and dangerous firmware on the device. In one example, the researchers used the vulnerability to hack a printer’s fuser — the heating element that bonds the toner pigment to the paper — causing the paper to turn brown and begin to smoke.

The attack vector is depressingly simple: Every time a vulnerable LaserJet printer accepts a print job, it scans that job to see if it includes a firmware update. Unvelievably, the printer doesn’t then check the source of the update; HP doesn’t digitally sign its updates, and the printer isn’t looking for HP’s signature. In other words, you can reverse engineer one of HP’s firmware updates, program your own, and then insert it into a print job. You can install whatever software you like on millions of network- and internet-connected LaserJet printers.

Tens of millions of HP LaserJet printers vulnerable to remote hacking | ExtremeTech
 

My Computer My Computer

At a glance

Win 7 Ultimate 64-bit. SP1.Intel i7 -720QM.[1.6GHz Turbo Boost 2.8GHz. 6...8 DDR 3 RAM. 1066MHZATI 1024 MB. DDR3. Radeon HD5650
Computer Manufacturer/Model Number
LAPTOP. HP Pavilion dv7-4010TX .
OS
Win 7 Ultimate 64-bit. SP1.
CPU
Intel i7 -720QM.[1.6GHz Turbo Boost 2.8GHz. 6MB Cache.]
Memory
8 DDR 3 RAM. 1066MHZ
Graphics Card(s)
ATI 1024 MB. DDR3. Radeon HD5650
Monitor(s) Displays
17.3" High Definition Brightview LCD. LED Backlit.
Screen Resolution
1600 x 900.
Hard Drives
640GB
Case
Laptop / notebook.
Mouse
Logitech Anywhere mouse. MX.
Internet Speed
ADSL [ but too slow ]
So, the fuser "dries the ink"? On a Laser-Jet? :confused:

I see a niche market in the making--Laser Lawyers. Call 1-800-BAD-LASER. :cool:
 

My Computer My Computer

At a glance

Windows 7 Pro-x64i7-2600 3.4GHz - 3.8GHz Turbo8Gb - 2x4GB, Muskin 991770 PC3-1333Integrated Intel HD 2000
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Built 2/11/2011
OS
Windows 7 Pro-x64
CPU
i7-2600 3.4GHz - 3.8GHz Turbo
Motherboard
Intel DH67BL-B3
Memory
8Gb - 2x4GB, Muskin 991770 PC3-1333
Graphics Card(s)
Integrated Intel HD 2000
Sound Card
Integrated Intel 10.1 HD, RealTek ALC892
Monitor(s) Displays
Asus LCD VH222H, Haier HL24XSL2a
Screen Resolution
1920x1080, 1920x1080
Hard Drives
Crucial SSD C300-128Gb,
Western Digital WD5002AALX - 500Gb,
Western Digital WD7501AALS - 750Gb
PSU
Seasonic 650W 80+ Gold Modular
Case
Rosewill Defender
Cooling
Stock CPU, Four 120mm case fans, PCH fan added
Keyboard
Logitech EX100 Y-RBH94 Wireless
Mouse
Logitech EX100 M-RCE95 Wireless
Internet Speed
3.0/1.5 Mbs
Antivirus
Microsoft Security Essentials
Browser
Microsoft Internet Explorer 11
Other Info
Antec Veris Premier-Multimedia IR Station,
Cyber Accoustics-3602 Speakers,
AFT XM-5U Card Reader,
Hauppauge TV-HVR-2250,
Sony LX300 USB Turntable
I'm glad I still have my old work horse , the HP LaserJet 1000, it has no internal chip set, and is dumber than a rock. But it works great. Unfortunately you can't get drivers that make it compatible with Win 7.
 

My Computer My Computer

At a glance

win 7 home premium 64 bitcore i5 7606 gbati 5450
Computer Manufacturer/Model Number
hp pavilion 6680t
OS
win 7 home premium 64 bit
CPU
core i5 760
Motherboard
iona (from MSI)
Memory
6 gb
Graphics Card(s)
ati 5450
Sound Card
real tek 888

My Computer My Computer

At a glance

Microsoft Windows 8.1 Pro 64-bitIntel(R) Core(TM) i3-4130 CPU @ 3.40GHz8.00 GBNone
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Asus Build
OS
Microsoft Windows 8.1 Pro 64-bit
CPU
Intel(R) Core(TM) i3-4130 CPU @ 3.40GHz
Motherboard
B85M-E
Memory
8.00 GB
Graphics Card(s)
None
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Asus 23.6" Monitor
Screen Resolution
1920 x 1080 x 32 bits (4294967296 colors) @ 60 Hz
Hard Drives
INTEL SSDSC2BW180A4
Samsung SSD 840 PRO Series
PSU
Seasonic S12II-380Bronze
Case
Lian Li
Cooling
Fan, Passive
Keyboard
Logitech K120
Mouse
Microsoft Touch Mouse
Internet Speed
4ms Ping, 19.0 Mbps Download, 19.0 Mbps Upload
Antivirus
Eset Endpoint
Browser
Internet Explorer, Chrome
After watching the original You Tube video from the researchers here are my thoughts. First they have to get you to send a modified file to the printer. The file has commands to reprogram the firmware of the printer. Of course a lot of people will be tricked into opening and printing these files. With the new firmware then it can be accessed from the internet. The second thing they stated is that the printer did not catch on fire as the printer had protection in the fuser circuit. They did show a very brown patch on the paper so it did toast it a bit, but no fire.

Jim :geek:
 

My Computer My Computer

At a glance

Windows 8.1 Pro w/Media Center 64bit, Windows...Phenom II X6 1100TCrucial Balistic 8gb DDR3-1866 CL9MSI R6850 Cyclone IGD5 PE
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Home Built
OS
Windows 8.1 Pro w/Media Center 64bit, Windows 7 HP 64bit
CPU
Phenom II X6 1100T
Motherboard
ASUS M5A99X EVO
Memory
Crucial Balistic 8gb DDR3-1866 CL9
Graphics Card(s)
MSI R6850 Cyclone IGD5 PE
Sound Card
On Board
Monitor(s) Displays
ASUS VE258Q 25" LED with DVI-HDMI-DisplayPort
Screen Resolution
1920 x 1080
Hard Drives
Two WD Cavier Black 2TB Sata III, WD My Book Essential 2TB USB 3.0
PSU
Seasonic X650 80 Plus GOLD Modular
Case
Corsair 400R
Cooling
Antec Kuhler H2O 620, Two 120mm and four 140mm
Keyboard
Logitech K120
Mouse
Logitech Marble Mouse USB, Logitech Precision Game Pad
Internet Speed
15MB
Antivirus
Norton IS 2013, Malwarebytes Pro Beta 2
Browser
IE-11, FF-27
Other Info
APC UPS ES 750, Netgear WNR3500L Gigabit & Wireless N Router with SamKnows Test Program, Motorola SB6120 Gigabit Cable Modem. Brother HL-2170W Laser Printer, Epson V300 Scanner
Im just waiting for my webcam to shoot a laser beam out of it and kill me now.
 

My Computer My Computer

At a glance

Windows 7Intel Core 2 T6500 / 2.10 Ghz4gbMobile Intel Graphics Media Accelerator 4500MHD
Computer Manufacturer/Model Number
Sony Vaio VGN-NW120J/S
OS
Windows 7
CPU
Intel Core 2 T6500 / 2.10 Ghz
Memory
4gb
Graphics Card(s)
Mobile Intel Graphics Media Accelerator 4500MHD
Monitor(s) Displays
15.5 / 1366x768
Hard Drives
Western Digital Scorpio Black WD3200BEKT

My Computer My Computer

At a glance

Windows 7 Pro-x64i7-2600 3.4GHz - 3.8GHz Turbo8Gb - 2x4GB, Muskin 991770 PC3-1333Integrated Intel HD 2000
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Built 2/11/2011
OS
Windows 7 Pro-x64
CPU
i7-2600 3.4GHz - 3.8GHz Turbo
Motherboard
Intel DH67BL-B3
Memory
8Gb - 2x4GB, Muskin 991770 PC3-1333
Graphics Card(s)
Integrated Intel HD 2000
Sound Card
Integrated Intel 10.1 HD, RealTek ALC892
Monitor(s) Displays
Asus LCD VH222H, Haier HL24XSL2a
Screen Resolution
1920x1080, 1920x1080
Hard Drives
Crucial SSD C300-128Gb,
Western Digital WD5002AALX - 500Gb,
Western Digital WD7501AALS - 750Gb
PSU
Seasonic 650W 80+ Gold Modular
Case
Rosewill Defender
Cooling
Stock CPU, Four 120mm case fans, PCH fan added
Keyboard
Logitech EX100 Y-RBH94 Wireless
Mouse
Logitech EX100 M-RCE95 Wireless
Internet Speed
3.0/1.5 Mbs
Antivirus
Microsoft Security Essentials
Browser
Microsoft Internet Explorer 11
Other Info
Antec Veris Premier-Multimedia IR Station,
Cyber Accoustics-3602 Speakers,
AFT XM-5U Card Reader,
Hauppauge TV-HVR-2250,
Sony LX300 USB Turntable
Whoa!

Tim:

They are working on the laser now so far it only kills your hair folicles thus rendering you bald. If you are already bald you will not notice any change except for a foul taste in your mouth.
 

My Computer My Computer

At a glance

win 7 X64 Ultimate SP1I3770KG Skill F3-14900CL9-4GBXL x 4NVIDIA GeForce GTX670 + Intel 4000
Computer Manufacturer/Model Number
BGC (Bob's Garage Crew)
OS
win 7 X64 Ultimate SP1
CPU
I3770K
Motherboard
Asus P8Z77-V Deluxe
Memory
G Skill F3-14900CL9-4GBXL x 4
Graphics Card(s)
NVIDIA GeForce GTX670 + Intel 4000
Sound Card
Realtek HD 5.1 (MOB)
Monitor(s) Displays
Asus VW224T (1)
Screen Resolution
1920 x 1080
Hard Drives
SATA Corsair Force GT 2.5" 180GB (System) Sata 3
OCZ Vertex3 120GB
OCZ Vertex 2 120GB 2.5" SATA II
ST31000524AS 1000.2GB
WD15EARS (External)
PSU
CoolerMaster 1000 Watt
Case
CoolerMaster HAF X
Cooling
CPU -- CoolerMaster 520N
Keyboard
MS Wireless 3000 V2
Mouse
MS Wireless 3000 V2
Internet Speed
Cable
Antivirus
Norton Internet Security
Browser
IE9
Other Info
AMI Bios 1805
OC'd 3%
Wait till xbox's kinect starts flashing families memories like men in black.
 
Last edited:

My Computer My Computer

At a glance

Windows 7Intel Core 2 T6500 / 2.10 Ghz4gbMobile Intel Graphics Media Accelerator 4500MHD
Computer Manufacturer/Model Number
Sony Vaio VGN-NW120J/S
OS
Windows 7
CPU
Intel Core 2 T6500 / 2.10 Ghz
Memory
4gb
Graphics Card(s)
Mobile Intel Graphics Media Accelerator 4500MHD
Monitor(s) Displays
15.5 / 1366x768
Hard Drives
Western Digital Scorpio Black WD3200BEKT
Back
Top