Read more: malware.news
The hacktivist group SkidSec, known for politically-charged cyberattacks, launched a significant campaign targeting printers across South Korea. The group exploited vulnerabilities in the Internet Printing Protocol (IPP) systems of thousands of printers to distribute propaganda materials featuring North Korean leader Kim Jong-un. SkidSec’s actions highlight the growing threat posed by hacktivist groups with ideological agendas, as well as the vulnerability of internet-connected devices (IoT) to exploitation. The campaign, dubbed the “North Korean Propaganda Distribution Campaign,” demonstrated the potential for malicious actors to weaponize seemingly innocuous devices for their own purposes. The attack’s success underscores the importance of implementing robust security measures for all IoT devices, including printers, to prevent such incidents. SkidSec, active since October 2023, utilized the Censys platform to identify printers lacking proper authentication, allowing them to remotely control the printing process and distribute their propaganda. This incident highlights the global risks associated with vulnerable IoT devices and serves as a stark reminder of the need for increased security awareness and vigilance in the interconnected world.