{"id":9845,"date":"2017-08-31T11:25:32","date_gmt":"2017-08-31T18:25:32","guid":{"rendered":"http:\/\/blog.hellotech.com\/?p=9845"},"modified":"2021-06-11T12:11:56","modified_gmt":"2021-06-11T19:11:56","slug":"hacked-printers","status":"publish","type":"post","link":"https:\/\/www.hellotech.com\/blog\/hacked-printers","title":{"rendered":"Even Printers Can Now Spy on Your Information and Vandalize Your Documents"},"content":{"rendered":"\n

They might seem harmless at first glance, but those printing machines can be made to turn against you or your business. <\/span>Printers are everywhere\u2014in households, schools, offices, government agencies, etc. As useful as these machines are, they\u2019ve long been devoid of any form of basic security. Combine their ubiquitous nature and their vulnerability to cyber attacks and you\u2019ll see why experts have long regarded network printers as prime targets for hackers.<\/span><\/p>\n\n\n\n

In a recent hacker conference, security experts reveal in detail how something as humble as a printer can be made to do malicious activities. It looks like we shouldn’t take this security concern lightly.<\/span><\/p>\n\n\n\n

Susceptibility in Connectivity<\/h2>\n\n\n\n

During Black Hat 2017, <\/span>Ruhr University Bochum<\/span>\u2019s <\/span>Jens M\u00fcller<\/span> emphasized how people shouldn\u2019t turn a blind eye on their printers for reasons of personal security. <\/span>He reveals that in the hands of shrewd hackers, such humble machines could do anyone considerable damage.<\/span><\/p>\n\n\n\n

A hacked printer, he said, can do anything from stealing personal info to defacing everything you print. <\/span>It can even be bricked with a simple denial of service (DoS) attack. And because printers are ubiquitous, it means anyone or any organization can fall victim to <\/span>them<\/span>.<\/span><\/p>\n\n\n\n

To make matters worse, most of today\u2019s printers come with Internet connectivity. Meaning, they\u2019re pretty accessible to hackers who may be lurking the WWW for their next target. To be fair, <\/span>though, <\/span>the same susceptibility applies <\/span>not only to printers, but also <\/span>to connected devices like VoIP phones and routers.<\/span> <\/span><\/p>\n\n\n\n

Ways\u00a0a Printer\u00a0Gets Hacked<\/h2>\n\n\n\n

M\u00fcller<\/span> highlights that inherent weaknesses within printer protocols make them vulnerable to a variety of attacks. Those include information espionage, denial of service, print job manipulation, and protection bypass.<\/span><\/p>\n\n\n\n

He notes that the vulnerabilities in printers have been documented for more than a decade already. The dilemma persists to this day and anyone interested in both hacking and protecting such equipment definitely has ample time to study both sides of the fence.<\/span><\/p>\n\n\n\n

On a related note, here are 4 ways your printer can get hacked.<\/span> <\/span><\/p>\n\n\n\n

Printers Disclose Personal Information<\/span><\/h2>\n\n\n\n

Recall all the financial statements, confidential reports, and personal transactions you\u2019ve ever printed\u2014they can all be stolen right under your nose. It\u2019s truly terrifying when you think about the possibility that your printer could be tampered by an attacker to steal sensitive documents. <\/span>M\u00fcller<\/span> reveals that he has done this horrific possibility and it should scare anyone who owns a printer.<\/span> <\/span><\/p>\n\n\n\n

M\u00fcller<\/span> <\/span>further reports that <\/span>it only takes a single command to <\/span>program printers to save print jobs to its internal memory and another to retrieve the details<\/span> on a later date<\/span>. He reassured the audience<\/span>, however,<\/span> that the feat was anything but easy. A malicious party would have to <\/span>figure out if a printer has a physical memory available and this could be outright difficult, especially if the machine sits comfortably behind a firewall. That, or inside a closely monitored copy room.<\/span> <\/span><\/p>\n\n\n\n

Denial of Service Attack<\/span><\/h2>\n\n\n\n

Among the attacks a hacker can perpetrate on a printer, this one is the easiest to do. <\/span>As its name implies, your printer will deny you service after this kind of cyber attack. <\/span>M\u00fcller<\/span> simply sent a print job containing a single line of PostScript code and he essentially set the printer into an infinite loop, effectively rendering it useless to anyone else who wanted to print something.<\/span><\/p>\n\n\n\n

Printing machines are vulnerable to this hack because they use a programming language, called PostScript, that performs both administrative functions and translates files into print jobs. It\u2019s easy to fool a printer that you\u2019re telling it to make permanent changes rather than produce a hard copy with <\/span>a DoS attack.<\/span><\/p>\n\n\n\n

Vandalizing Subsequent Print Jobs<\/span><\/h2>\n\n\n\n

Tampering somebody else\u2019s printed reports is something that some of us probably may have plotted against a person we especially don\u2019t like in the office. As it turns out, anyone can maliciously manipulate print jobs.<\/span> <\/span><\/p>\n\n\n\n

In <\/span>M\u00fcller<\/span>\u2019s demonstration, he used the unique facet of PostScript wherein a change made with one print job could be made permanent for all subsequent prints. Using an overlay command, he placed a Black Hat conference logo over any document produced from a targeted printer. He <\/span>shares<\/span> that hackers can<\/span> even<\/span> introduce permanent misspellings for any print a certain user does.<\/span><\/p>\n\n\n\n

Bypassing Password-Protected Printers<\/span><\/h2>\n\n\n\n

Let\u2019s say a savvy network administrator sets passwords in place for all vulnerable devices, including network printers. While this is a wise countermeasure against hackers, <\/span>M\u00fcller shares that a single line of Printer Job Language (PJL) code, another printer protocol, can reset the device to its factory settings. Doing so essentially removes the password designated by the administrator, leaving the printer vulnerable to hacks.<\/span><\/p>\n\n\n\n

Reason for the Vulnerability<\/span><\/h2>\n\n\n\n

Printing protocols, which translate files into something printers can put to paper, aren’t secure at all. Both the <\/span>Printer Job Language<\/span> by HP and the <\/span>PostScript<\/span> by Adobe are printer languages that don’t define the difference between commands and print jobs. Printers often execute code written in either protocols even when those codes are contained within print jobs. “You have data and code over the same channel, and that’s always a bad idea,” <\/span>M\u00fcller shares.<\/span><\/p>\n\n\n\n

“In the long-term actually we need to get ride of insecure printer languages,” the researcher continued. He admits that it may still take a while before this resolution comes around. <\/span>M\u00fcller urged printer manufacturers to undo unsecure designs like blocking TCP port 9100.<\/span><\/p>\n\n\n\n

How to Protect Printers for the Meantime?<\/span><\/h2>\n\n\n\n

With these destructive threats, <\/span>M\u00fcller advises printer owners to <\/span>sandbox<\/span><\/a> their machines into a separate <\/span>VLAN<\/span><\/a>. The virtual LAN should only be accessible through a hardened print server, too.<\/span><\/p>\n\n\n\n

To further protect your devices from cyber attacks, experts recommend these <\/span>tips to secure the connected home<\/span><\/a>. Having any problems with your printer? You might want to learn about <\/span>6 common printer problems<\/span><\/a> you can troubleshoot yourself.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

They might seem harmless at first glance, but those printing machines can be made to turn against you or your business. Printers are everywhere\u2014in households, schools, offices, government agencies, etc. As useful as these machines are, they\u2019ve long been devoid of any form of basic security. Combine their ubiquitous nature and their vulnerability to cyber attacks and you\u2019ll see why experts have long regarded network printers as prime targets for hackers. In a recent hacker conference, security experts reveal in detail […]<\/p>\n","protected":false},"author":1,"featured_media":9896,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[17601,17593],"tags":[],"class_list":["post-9845","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-printers","category-staying-safe"],"acf":[],"yoast_head":"\nEven Printers Can Now Spy on Your Information and Vandalize Your Documents - The Plug - HelloTech<\/title>\n<meta name=\"description\" content=\"In a recent hacker conference, security experts reveal in detail how something as humble as a printer can be made to act maliciously.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hellotech.com\/blog\/hacked-printers\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Even Printers Can Now Spy on Your Information and Vandalize Your Documents - The Plug - HelloTech\" \/>\n<meta property=\"og:description\" content=\"They might seem harmless at first glance, but those printing machines can be made to turn against you or your business. Printers are everywhere\u2014in\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hellotech.com\/blog\/hacked-printers\" \/>\n<meta property=\"og:site_name\" content=\"The Plug - HelloTech\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/www.facebook.com\/hellotech\" \/>\n<meta property=\"article:published_time\" content=\"2017-08-31T18:25:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-11T19:11:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2017\/08\/hackedprinter-min-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"426\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@HelloTech\" \/>\n<meta name=\"twitter:site\" content=\"@HelloTech\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/hacked-printers#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/hacked-printers\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c\"},\"headline\":\"Even Printers Can Now Spy on Your Information and Vandalize Your Documents\",\"datePublished\":\"2017-08-31T18:25:32+00:00\",\"dateModified\":\"2021-06-11T19:11:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/hacked-printers\"},\"wordCount\":1044,\"publisher\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\"},\"articleSection\":[\"Printers\",\"Staying Safe\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/hacked-printers\",\"url\":\"https:\/\/www.hellotech.com\/blog\/hacked-printers\",\"name\":\"Even Printers Can Now Spy on Your Information and Vandalize Your Documents - The Plug - HelloTech\",\"isPartOf\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#website\"},\"datePublished\":\"2017-08-31T18:25:32+00:00\",\"dateModified\":\"2021-06-11T19:11:56+00:00\",\"description\":\"In a recent hacker conference, security experts reveal in detail how something as humble as a printer can be made to act maliciously.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/hacked-printers#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.hellotech.com\/blog\/hacked-printers\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/hacked-printers#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.hellotech.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Even Printers Can Now Spy on Your Information and Vandalize Your Documents\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#website\",\"url\":\"https:\/\/www.hellotech.com\/blog\/\",\"name\":\"The Plug - HelloTech\",\"description\":\"Turn to The Plug for informative tech news that you can use. \",\"publisher\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.hellotech.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\",\"name\":\"HelloTech\",\"url\":\"https:\/\/www.hellotech.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png\",\"contentUrl\":\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png\",\"width\":1000,\"height\":174,\"caption\":\"HelloTech\"},\"image\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"http:\/\/www.facebook.com\/hellotech\",\"https:\/\/twitter.com\/HelloTech\",\"http:\/\/www.instagram.com\/hello_tech\",\"https:\/\/www.youtube.com\/channel\/UCIR-fbAKRfVuAbciDr2z4nQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g\",\"caption\":\"admin\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Even Printers Can Now Spy on Your Information and Vandalize Your Documents - The Plug - HelloTech","description":"In a recent hacker conference, security experts reveal in detail how something as humble as a printer can be made to act maliciously.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hellotech.com\/blog\/hacked-printers","og_locale":"en_US","og_type":"article","og_title":"Even Printers Can Now Spy on Your Information and Vandalize Your Documents - The Plug - HelloTech","og_description":"They might seem harmless at first glance, but those printing machines can be made to turn against you or your business. Printers are everywhere\u2014in","og_url":"https:\/\/www.hellotech.com\/blog\/hacked-printers","og_site_name":"The Plug - HelloTech","article_publisher":"http:\/\/www.facebook.com\/hellotech","article_published_time":"2017-08-31T18:25:32+00:00","article_modified_time":"2021-06-11T19:11:56+00:00","og_image":[{"width":640,"height":426,"url":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2017\/08\/hackedprinter-min-1.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_creator":"@HelloTech","twitter_site":"@HelloTech","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.hellotech.com\/blog\/hacked-printers#article","isPartOf":{"@id":"https:\/\/www.hellotech.com\/blog\/hacked-printers"},"author":{"name":"admin","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c"},"headline":"Even Printers Can Now Spy on Your Information and Vandalize Your Documents","datePublished":"2017-08-31T18:25:32+00:00","dateModified":"2021-06-11T19:11:56+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hellotech.com\/blog\/hacked-printers"},"wordCount":1044,"publisher":{"@id":"https:\/\/www.hellotech.com\/blog\/#organization"},"articleSection":["Printers","Staying Safe"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.hellotech.com\/blog\/hacked-printers","url":"https:\/\/www.hellotech.com\/blog\/hacked-printers","name":"Even Printers Can Now Spy on Your Information and Vandalize Your Documents - The Plug - HelloTech","isPartOf":{"@id":"https:\/\/www.hellotech.com\/blog\/#website"},"datePublished":"2017-08-31T18:25:32+00:00","dateModified":"2021-06-11T19:11:56+00:00","description":"In a recent hacker conference, security experts reveal in detail how something as humble as a printer can be made to act maliciously.","breadcrumb":{"@id":"https:\/\/www.hellotech.com\/blog\/hacked-printers#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hellotech.com\/blog\/hacked-printers"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.hellotech.com\/blog\/hacked-printers#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hellotech.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Even Printers Can Now Spy on Your Information and Vandalize Your Documents"}]},{"@type":"WebSite","@id":"https:\/\/www.hellotech.com\/blog\/#website","url":"https:\/\/www.hellotech.com\/blog\/","name":"The Plug - HelloTech","description":"Turn to The Plug for informative tech news that you can use. ","publisher":{"@id":"https:\/\/www.hellotech.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hellotech.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.hellotech.com\/blog\/#organization","name":"HelloTech","url":"https:\/\/www.hellotech.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png","contentUrl":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png","width":1000,"height":174,"caption":"HelloTech"},"image":{"@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/www.facebook.com\/hellotech","https:\/\/twitter.com\/HelloTech","http:\/\/www.instagram.com\/hello_tech","https:\/\/www.youtube.com\/channel\/UCIR-fbAKRfVuAbciDr2z4nQ"]},{"@type":"Person","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g","caption":"admin"}}]}},"_links":{"self":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts\/9845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/comments?post=9845"}],"version-history":[{"count":0,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts\/9845\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/media\/9896"}],"wp:attachment":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/media?parent=9845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/categories?post=9845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/tags?post=9845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}