Incident
incident:printer_exploitation_incident
Also: PewDiePie printer hack, printers worldwide hack
Mass remote printing operation targeting approximately 50,000 internet-exposed printers with a message about PewDiePie and printer security.
Mass remote printing operation targeting approximately 50,000 internet-exposed printers with a message about PewDiePie and printer security.
“Someone Hacked Printers Worldwide Urging People to Subscribe to PewDiePie.”
“It honestly took around 24 to 28 hours to actually complete the full 50,000 IPs.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ATTRIBUTED_TO | Hacker Giraffe | Explicit | 31 |
| outgoing | COMPROMISES | network printer | Explicit | 31 |
| outgoing | INITIAL_ACCESS_VIA | internet-exposed printer | Derived | 31 |
| outgoing | INVOLVES | remote printing | Explicit | 31 |
| outgoing | INVOLVES | PewDiePie | Explicit | 31 |
| outgoing | INVOLVES | T-Series | Explicit | 31 |
| outgoing | INVOLVES | User | Explicit | 31 |
printer exploitation incident ATTRIBUTED_TO Hacker Giraffe
The worldwide printer exploitation incident is presented as Hacker Giraffe’s action.
Explicit Confidence 99% · Jack Rhysider EP 31 Details
“Someone Hacked Printers Worldwide Urging People to Subscribe to PewDiePie.”
“This brings us back to The Hacker.”
printer exploitation incident COMPROMISES network printer
The incident remotely caused exposed network printers to print messages and, in some cases, display a hacked name.
Explicit Confidence 99% · Jack Rhysider EP 31 Details
“It successfully printed to 100 printers and then 1000 printers and then 10,000 printers.”
printer exploitation incident INITIAL_ACCESS_VIA internet-exposed printer
The printer incident gained access through printers exposed to the public internet, especially those with port 9100 open.
Derived Confidence 96% · Jack Rhysider EP 31 Details
“if these ports were exposed to the internet it may mean that someone can print to that machine from anywhere in the world”
printer exploitation incident INVOLVES remote printing
The incident involved remotely sending print jobs to thousands of printers.
Explicit Confidence 99% · Jack Rhysider EP 31 Details
“His script would connect to one printer at a time, send it a PDF, and tell it to print.”
printer exploitation incident INVOLVES PewDiePie
The printer messages promoted PewDiePie and urged recipients to subscribe to him.
Explicit Confidence 99% · Jack Rhysider EP 31 Details
“PewDiePie is in trouble and needs your help to defeat T-Series. Unsubscribe from T-Series and subscribe to PewDiePie.”
printer exploitation incident INVOLVES T-Series
The printer message urged recipients to unsubscribe from T-Series as part of the PewDiePie campaign.
Explicit Confidence 99% · Jack Rhysider EP 31 Details
“Unsubscribe from T-Series and subscribe to PewDiePie.”
printer exploitation incident INVOLVES User
User participated with Hacker Giraffe in the later operation targeting the remaining exposed printers.
Explicit Confidence 95% · Hacker Giraffe EP 31 Details
“We went through the full 800,000 with the same message again.”