Stackoverflowin / sthack

[Maria_F]

I have the same problem that many reported since yesterday. Printer seems to be hacked printing pages with the message: "stackoverflowin/ sthack the hacker god has returned - sthack@protonmail.com - htt" and also "READ --> ------------- stackoverflowin has returned to his glory, your printer is part of"

It is a network printer, connected with cable (WiFi turned off)

Do you know if this is a problem of the printer or the computer?

[hp_help_A0J]

Hi, just wanted to check in here because I received the exact same messages yesterday and today,

but there doesn't seem to be much discussion about this in the forum (or am I missing the right location?)

Mine is Officejet Pro 8620 (all-in-one), Windows 10 (64-bit)

Mine has ePrint and works on (private) Wi-fi.

After yesterday's message (the first one), I discovered that I hadn't set any configuration password for my printer's Embedded Web Server, so I set it just in case. But today I still got the second message.

I followed some directions here and made my computer save event logs for related to printing, but nothing showed up:

http://smallbusiness.chron.com/check-printer-logs-54952.html

You might check your PC but I suspect the printed documents have nothing to do with our individual PCs.

I guess the last resort would be to use it offline, but before I do that I'll check with my local HP support team and come back if I learn anything new.

EDIT: This isn't really an HP problem. Check this viedo out: https://www.youtube.com/watch?v=ojXpsazraFA

[Nexus_IT]

Sounds like you're printer ports are open in the router: https://nexusconsultancy.co.uk/blog/printer-part-flaming-botnet/

[hoard_master · Accepted solution]

There should be some Embedded Web Server setting for security for your printer.  Type the IP address of the printer in a browser address bar to open up the printer's EWS- and verify what settings are enabled or disabled.  The doc link below is a good reference to what settings may be applicable to your ink printer (this is for a LaserJet but most basic security settinggs should also apply for ink products)

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c03687861&sp4ts.oid=27718