TLDR InfoSec · ATTACKS & VULNERABILITIES

PROCOLORED PRINTER SOFTWARE CONTAINED MALWARE

links.tldrnewsletter.com2 min read

Summary from the TLDR InfoSec newsletter

After receiving a new direct-to-film printer from China-based Procolored, YouTuber Cameron Coward engaged with cybersecurity researcher Kirsten Hahn after his computer was infected by malware. Hahn discovered that 39 files for products on Procolored's Mega.nz account triggered malware detections for a cryptocurrency wallet stealer and an XRed backdoor for Windows PCs. Hahn suggested that the company may not have intentionally introduced the malicious files, as the C2 server for XRed backdoor is offline.