Get the latest tech news

Procolored printer drivers contained malware


A printer company distributed malware-infected files for months. Analysts have now dissected the code and revealed what the malware does once it infects a computer.

Although Floxif didn't appear in the website downloads G Data reviewed, its presence on Coward's USB points to the possibility of a more compromised environment at some earlier stage. The widespread infection found across Procolored's downloadable files means it's plausible that the malware spread through a developer's workstation or the company's build servers. Although the XRedRAT backdoor was likely rendered ineffective by its offline command and control server, SnipVex remained a serious concern thanks to its ability to infect files, even though it had stopped siphoning Bitcoin.

Get the Android app

Or read this on Hacker News

Read more on:

Photo of months

months

Photo of false positives

false positives

Photo of printer company

printer company

Related news:

News photo

9 Months Later, Microsoft Finally Fixes Linux Dual-Booting Bug

News photo

GTA 5 is continuing to sell 5 million copies every 3 months, and Red Dead Redemption 2 is now the "best-selling title of the past 7 years in the US"

News photo

Printer maker Procolored offered malware-laced drivers for months