US$ 6k UV printer came with backdoor and trojan - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: May 19, 2025, 01:11:56 pm
content: A review of the Procolored V11 Pro changed into hunting down malware in the driver:- The Maker’s Toolbox: Procolored V11 Pro DTO UV Printer Review,https://www.hackster.io/news/the-maker-s-toolbox-procolored-v11-pro-dto-uv-printer-review-680d491e17e3- Viruses included in product I'm reviewing?,https://www.reddit.com/r/computerviruses/comments/1kbkmgq/viruses_included_in_product_im_reviewing/- Printer company provided infected software downloads for half a year,https://www.gdatasoftware.com/blog/2025/05/38200-printer-infected-software-downloadsTL;DR:- driver for UV printer came with backdoor and trojan for at least half a year- manufacturer denies allegation- security company confirms malware- manufacturer comes up with lame excuse and uploads new driver

author: SiliconWizard
author_rank: Super Contributor
timestamp: May 19, 2025, 02:24:11 pm
content: Was it intentional or the result of having outsourced development?

author: madires
author_rank: Super Contributor
timestamp: May 19, 2025, 04:38:05 pm
content: I'd guess the manufacturer won't tell us that.

author: eutectique
author_rank: Frequent Contributor
timestamp: May 19, 2025, 04:47:08 pm
content: QuoteThis is fishy.

author: RoGeorge
author_rank: Super Contributor
timestamp: May 19, 2025, 04:55:54 pm
content: Quote from: madires on May 19, 2025, 01:11:56 pmThanks, very good idea to add a brief!

author: D.Burnette
author_rank: Contributor
timestamp: May 19, 2025, 10:14:36 pm
content: It looks like they are built around Epson printheads. So they are at least partially leveraging known-good codebases. Chances are they grabbed a library with crap in it.Doesn't surprise me that one of the cheaper DTF/UV printers on the market has badly written drivers with embedded malware...But their "address" is on their website if you want to head to Los Angeles and bang on the door of a little rented space in an industrial strip.It seems like they sell in Europe. Luckily in a year or so, the CRA will be enforced. Even people outside of Europe will be able to take advantage of this as a forcing function: Manufacturer doesn't respond? Report the vulnerability to the ENISA, and the manufacturer may have to stop EU sales.

author: UnijunctionTransistor
author_rank: Frequent Contributor
timestamp: May 19, 2025, 10:46:50 pm
content: Quote from: D.Burnette on May 19, 2025, 10:14:36 pmExactly. Behind the tree.

author: thm_w
author_rank: Super Contributor
timestamp: May 21, 2025, 08:45:48 pm
content: Quote from: eutectique on May 19, 2025, 04:47:08 pmCould be, but its also normal because it allows support to actually verify your settings.Customer might say 100 times "yes I set that setting to xyz" then you check on their machine and no, it wasn't set.. So can save time to just do it for them, instead of guiding them over the phone.

author: ZGoode
author_rank: Frequent Contributor
timestamp: May 21, 2025, 08:53:53 pm
content: Yeah, but a screengrab could suffice here. The only time I've ever had anyone request remote computer access is at work when the IT center needs to enter the admin password cause none of us are trusted with that.

author: langwadt
author_rank: Super Contributor
timestamp: May 21, 2025, 10:29:46 pm
content: Quote from: D.Burnette on May 19, 2025, 10:14:36 pmthink that'll work any better that all the safety standards preventing dangerous USB chargers and such being sold?

author: peter-h
author_rank: Super Contributor
timestamp: June 05, 2025, 06:16:30 am
content: QuoteThat is indeed fishy, but so many vendors are doing it nowadays. Even Google (adwords) is doing it - requesting admin access to our PCs for setting up keywords on our online shop. I refuse and they just say they can't help us at all.Many years ago, a client of mine sent out a 3.5% floppy disk which was allegedly infected with a boot sector virus (DOS days) and his customer sued him. It was settled but if you get the wrong person it can get tricky