Does anyone know of any attacks, either PoC or in the wild, that use malicious printer cartridges to infect printers? I saw this article from 2022
https://www.action-intell.com/2022/10/05/hp-bug-bounty-program-finds-reprogrammable-chips-open-printers-to-malware/
It says that HP's Bug Bounty program found such attacks are possible, but there are no details about who reported the bug that made such attacks possible. I remain skeptical about the accuracy.
Any help from experts in the form of pointers to attacks or analysis about whether printer cartridges are a viable infection vector would be much appreciated.
Dan Goodin /
npub1yy…p6r3v
2024-01-19 18:44:30
Author Public Key
npub1yyl6ktycvjymch9hyzq5yqphj89kalfqmtswcjpjmp7s67ms6g9sdp6r3vPublished at
2024-01-19 18:44:30Event JSON
{
"id": "f5e3f22e6c0ec56ca9374d5a47e44091a0ee1655e541f62a6279fb721c371ef7",
"pubkey": "213fab2c986489bc5cb7208142003791cb6efd20dae0ec4832d87d0d7b70d20b",
"created_at": 1705689870,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/dangoodin/statuses/111784091345587251",
"activitypub"
]
],
"content": "Does anyone know of any attacks, either PoC or in the wild, that use malicious printer cartridges to infect printers? I saw this article from 2022 \n\nhttps://www.action-intell.com/2022/10/05/hp-bug-bounty-program-finds-reprogrammable-chips-open-printers-to-malware/\n\nIt says that HP's Bug Bounty program found such attacks are possible, but there are no details about who reported the bug that made such attacks possible. I remain skeptical about the accuracy.\n\nAny help from experts in the form of pointers to attacks or analysis about whether printer cartridges are a viable infection vector would be much appreciated.",
"sig": "dea437e2b2291e8d4d6d7016909cee03fd65910146e4565021aadfecc818a2a6135c2e1ba4adc7368555a753c5c86ae9696a961c51fbd64e5fe846f8a37efda8"
}