This Message Will Self-Destruct

by IRIS Solutions December 2, 2011

Researches and students at Columbia University have found a loophole that allows hackers to access your office printers.  They can steal information, wreak havoc on your system, or literally cause it to self-destruct.  By accessing the remote firmware update features, researches were able to remotely access a printer, snag a Social Security Number and Credit Card number, and flood the printer with commands causing it to overheat, melt, or potentially catch fire.  HP's pre-2009 LaserJet models are the printers that are affected.  The loophole basically exists because these model printers run automatic remote firmware updates and they don't require digital signature from the manufacturer.  A hacker can see your printer requesting the update over the network, then build a malicious program that will be installed on the printer as if it were a legitimate firmware.  Once that's done, a hacker can then swipe very important, confidential, and highly sensitive information in a matter of seconds.  HP is now scrambling to fix the issue, but in the meantime, make sure your firewall and AV are up to date and running properly.  Printers that are designed for home use are not affected by this, nor are the models purchased from 2010 on.  However, some devices such as home routers, VOIP devices, and ISP cable and DSL modems could be.  Don't worry, this message won't litereally self-destruct.

Tags: ,

Tech Advise

Add comment




  Country flag
biuquote
  • Comment
  • Preview
Loading



About IRIS Solutions

IRIS Solutions has led the Charlotte, North Carolina, IT market for over 15 years. Throughout our time in business, we have worked to continually reinvest in our organization and our people to deliver the vision on which we were founded.

Month List

Page List