How Your Printer Is Like Swiss Cheese

In February 2017, the FBI reported that a hacker using the alias Stackoverflowin compromised over 160,000 printers by scanning for printers open on ports 515, 631, and 9100. Stackoverflowin sent print jobs to the affected printers, demonstrating the ease with which these devices could be exploited.

Often overlooked as an Internet of Things (IoT) device, printers offer promiscuous connectivity, serving as easy access points with a massive network footprint. The majority of printers are simply just plugged in to the network, which allows anyone with network access to connect and upload malware to these devices. With so many access points, including Wi-Fi Direct, Ethernet, Wi-Fi 5 GHz, Wi-Fi 2.4 GHz, and Bluetooth, bad actors can easily access any network and gain control of valuable data.

Printers are like a premium Swiss cheese — the highest quality, but full of holes. Many of these machines last 20 to 30 years, and, as a result, their security is overlooked because of their durability. Once a printer has passed the 20-year mark, there are no longer any effective security updates. At that point, it is time to ask: Is durability worth the risk?

For many organizations, the printer offers an easy way in for an attacker. Once bad actors get a foothold on the device, malware can be installed, then used to attack the rest of the network. While there are dozens of known exploits for printers, there are also a lot of devices for IT teams to manage. Thus, IT teams are often overwhelmed by device management and overlook printers. Furthermore, large commercial printers are often managed by other teams, such as facilities management or third-party vendors, leaving enterprises wondering who is responsible for printer security or, even worse, who is accountable when devices are hacked.

After reviewing more than 1 million IoT devices, 20% of which were printers, I found that very few printers had passwords. On top of that, none of them had up-to-date firmware All of them, therefore, are vulnerable to potential attacks. Follow these best practices to keep printers safe from unauthorized access, network pivots, east-west navigation with multiple network interfaces, data theft, and eavesdropping.

Finally, with 3D printers and additive manufacturing on the rise, even the most advanced devices are susceptible to bad actors. With 3D printers, the risk is worse: a sophisticated hacker could potentially tamper with the production process itself, creating flaws in the finished products. An attack on a 3D printer could also be used to steal valuable IP or cause production outages and delays. If you have ever listened to a 3D printer, it could also be a creative exfil platform using audio.

By keeping in mind these best practices for office printers and 3D printers, organizations can take proactive measures to keep their devices, data, and networks safe. Organizations must not overlook the massive footprint that printers hold, and instead emphasize keeping these endpoints secure.