Thousands of office printers hit by "gibberish" malware
Summary: What's been dubbed as a "paper salesman's dream come true," thousands of printers worldwide are spewing out garbled content as a result of a malware infection.
Thousands of office printers from large businesses around the world are churning out page after page of gibberish and wasting vast reams of paper.
For once it seems malware is to blame.
Dubbed "Trojan.Milicenso," it has been described by security researchers as a malware delivery vehicle "for hire" through its repeated use since it was first discovered in 2010, according to security firm Symantec.
The worst hit appear to be large companies in the U.S., India, northern Europe --- including the U.K. --- and South America.
Symantec said there were a number of ways the malware can find its way onto PCs, including opening a malware-laden email attachment, through a compromised website, or posing as fake video codecs.
Once the malware is opened, it redirects the user to pages to serve up adverts; a common way for malware writers to generate quick revenue.
But one of the apparent "side effects" of the malware affects printers.
The malware unpacks a file in a PCs printer queue, which Windows then turns into a print job. Because these files aren't readable to ordinary folk without special tools, it churns out incomprehensible gobbledegook, and doesn't stop until the printer runs out of paper, disconnected from the power supply, or is attacked by a peeved systems administrator with an axe.
It's like dragging a system file into a plain-text editor: most of the time you'll see garbage.
If your corporate printers are seemingly spewing out incomprehensible rubbish --- it's either an overworked intern who's fallen asleep at the keyboard --- or more likely a malware infection.
Image credit: Ricky Leong/Flickr.
Related:
- Apple to support reps: "Do not attempt to remove malware"
- CNET: Behind the 'Flame' malware spying on Mideast computers (FAQ)
More from Zero Day:
- F-Secure chief warns Siri is 'unsafe for business'
- Privacy change: iOS 6 to seek permission before apps can access personal data
- Google flagging 9,500 malicious sites every day
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
Printers under attack
http://www.kaspersky.com/images/Ang%20Cui.pdf
They should rename this malware, the anti-green malware, as this malware is not environment friendly by wasting reams of bond papers.
Seems like...
True!
RE: Lawyers filing patent infringement lawsuits..
Re: Seems like...
+100
Thanks for the laugh!
TW
Yeah, but the lawyers deserve the headache!
A: Skeet...
LOL
Printer pranks
Sensationalist Reporting
Oh C'mon WCarlS,
While there are many times I feel some of Zack's blogs have hidden agendas, he does usually provide links to back up stories like this. Try reading thoroughly before coming down on someone.
You may find it enjoyable and perhaps could extend your knowledge base.
TW
Hidden agenda?
Thanks for the comment -- Zack.
The Evil That Men Do...
When they created this sad crap with it's registry, and initially insecure modes, they really had no idea how they would fund both malware makers and malware fighters into giant industries that would rival Microsoft itself in reach and income. It just seemed a good idea at the time.
Nah mate
What people think are patches and service packs merely update the colour palette and sound system so that you are reassured that all is well and nothing is amiss.
The registry came from
IBM -> HAL VMS -> WNT
The first time I saw this one was...
Printer Malware
The PCs are hit by malware, not printers, right?
1) PC is infected by the Trojan.Milicenso virus
2) Malware unpacks a file in a PCs printer queue
3) Windows then turns the file into a print job
4) As a print job, these files are incomprehensible gobbledegook, just like a system file would be if opened in a plain-text editor, and was then printed.
The printer is simply doing what the infected PC told it to do. The problem is with the infected PC, yet the title of the article implies that the printers are infected by a virus.
Furthermore, the photo is not related to this story at all. It's from a 2008 event when a printer came up with a funny message (probably a debug message in the FW) which was cleared by a reboot. (click the link: Image credit: Ricky Leong/Flickr to see the story)
To me, this article is misleading. It seems to play off of the recent concerns about whether printer FW is secure, or could be hacked. Am I missing something here?