🆘 SOS! We’re being robbed: Procolored Chinese printer drivers contained a remote access trojan and bitcoin-stealing malware…
🆘 SOS! We’re being robbed: Procolored Chinese printer drivers contained a remote access trojan and bitcoin-stealing malware…
The malicious link was hosted directly on the official support site. A total of 39 compromised files were detected.
➡️ Procolored, based in Shenzhen, China 🇨🇳, specializes in digital printing solutions, including DTF, UV, and DTGprinters.
➡️ The company sells its products in 30 countries, including the United States 🇺🇸, where it has a broad customer base.
➡️ For at least six months, official driver downloads contained two types of malware:
➡️XRedRAT, a remote access trojan
➡️SnipVex, a clipboard hijacker that replaces copied Bitcoin wallet addresses with those controlled by attackers
➡️ According to reports, the attack led to the theft of 9.3 BTC, worth approximately $953,000 USD.
➡️ After detecting the breach, parent company Tiansheng removed the infected files and blamed the incident on cross-contamination via USB devices.
Authorities and cybersecurity experts recommend performing a full system reinstall on any computer that used the compromised drivers. Clean versions (malware-free) are available but must be requested directly from Tiansheng technical support.
#news #crypto #USA #China #global
🏦 Payouter.com — looking for traders for processing in 🇮🇳 India: P2P, P2C, Intent. We are waiting for you
Payments High Risk Newsletter
Join the newsletter to receive the latest updates in your inbox.