Post new question
Question
Reply
 
Honor Student
Posts: 2
Member Since: ‎02-03-2017
Message 1 of 4 (8,224 Views)
Accepted Solution

Stackoverflowin / sthack

Product Name: HP Officejet 7612
Operating System: Microsoft Windows 8.1 (64-bit)

I have the same problem that many reported since yesterday. Printer seems to be hacked printing pages with the message: "stackoverflowin/ sthack the hacker god has returned - sthack@protonmail.com - htt" and also "READ --> ------------- stackoverflowin has returned to his glory, your printer is part of"

It is a network printer, connected with cable (WiFi turned off)

 

Do you know if this is a problem of the printer or the computer?

Reply
0 Kudos
Accepted Solution

Re: Stackoverflowin / sthack

There should be some Embedded Web Server setting for security for your printer.  Type the IP address of the printer in a browser address bar to open up the printer's EWS- and verify what settings are enabled or disabled.  The doc link below is a good reference to what settings may be applicable to your ink printer (this is for a LaserJet but most basic security settinggs should also apply for ink products)

 

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c03687861&sp4ts.oid=27718

View solution in context
Student
Posts: 1
Member Since: ‎02-03-2017
Message 2 of 4 (8,095 Views)

Re: Stackoverflowin / sthack

[ Edited ]

Hi, just wanted to check in here because I received the exact same messages yesterday and today,

but there doesn't seem to be much discussion about this in the forum (or am I missing the right location?)

 

Mine is Officejet Pro 8620 (all-in-one), Windows 10 (64-bit)

Mine has ePrint and works on (private) Wi-fi.

 

After yesterday's message (the first one), I discovered that I hadn't set any configuration password for my printer's Embedded Web Server, so I set it just in case. But today I still got the second message.

 

I followed some directions here and made my computer save event logs for related to printing, but nothing showed up:

http://smallbusiness.chron.com/check-printer-logs-54952.html

 

You might check your PC but I suspect the printed documents have nothing to do with our individual PCs.

 

I guess the last resort would be to use it offline, but before I do that I'll check with my local HP support team and come back if I learn anything new.

 

EDIT: This isn't really an HP problem. Check this viedo out: https://www.youtube.com/watch?v=ojXpsazraFA

 

Tutor
Posts: 2
Member Since: ‎02-03-2017
Message 3 of 4 (7,456 Views)

Re: Stackoverflowin / sthack

Sounds like you're printer ports are open in the router: https://nexusconsultancy.co.uk/blog/printer-part-flaming-botnet/

Teacher
Posts: 93
Member Since: ‎04-08-2010
Message 4 of 4 (6,696 Views)

Re: Stackoverflowin / sthack

There should be some Embedded Web Server setting for security for your printer.  Type the IP address of the printer in a browser address bar to open up the printer's EWS- and verify what settings are enabled or disabled.  The doc link below is a good reference to what settings may be applicable to your ink printer (this is for a LaserJet but most basic security settinggs should also apply for ink products)

 

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c03687861&sp4ts.oid=27718

Although I am an HP employee, I am speaking for myself and not for HP.
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation