Somebody is hacking 3D printers to warn homeowners of a safety flaw


Do you could have an Anycubic Kobra 2 Professional/Plus/Max 3D printer?  Do you know it has a safety vulnerability?

For those who answered “sure” to each these questions, then chances are high that I can guess simply how you discovered your 3D printer was weak to hackers.

My wager is that you just might need learnt about the issue after seeing an odd message displayed in your machine, claiming that it had been hacked.

As a number of posts on Reddit verify, homeowners of the 3D printers have had an uncommon message pop up on their gadgets.

The message accommodates ASCII artwork of a worm and claims to be “innocent” – however warns of a “crucial vulnerability” within the printer, posing a “important menace”. It advises affected customers to disconnect their printer from the web to keep away from being hacked.

Within the message, somebody calling themselves “printer god” bemoans Anycubic’s lax safety and warns {that a} malicious assault may have precipitated harm.

The warning message within the file hacked_machine_readme.gcode could be safely deleted from the printer’s display screen or USB drive.  The writer claims to have despatched it to over 2.9 million weak printers.

The hack appears to be linked to a put up in an internet discussion board earlier this week by a person referred to as “Dump”.  “Dump” claimed to have tried to speak with Anycubic for 2 months about “two crucial safety vulnerabilities” – with one described as “catastrophic if discovered to be malicious.”

Anycubic has now confirmed the existence of a “safety concern”, which it claims was “attributable to a 3rd celebration utilizing a safety vulnerability of the MQTT server to entry customers’ printers.”

Anycubic says that it’s enhancing its cloud server safety and can launch new firmware to customers on March 5, 2024.

This is not the primary time that printers have been hijacked via safety vulnerabilities to unfold messages. For example, in 2018, 1000’s of printers have been seized to print out a message selling PewDiePie’s YouTube channel.


Lascia un commento

Il tuo indirizzo email non sarà pubblicato. I campi obbligatori sono contrassegnati *