According to a series of online reports from Anycubic customers, their 3D printers were hacked by an individual who warned them that devices were vulnerable to attacks.
See also: Millions of patients' data confirmed stolen after Fortra hack
The person behind this incident added a hacked_machine_readme.gcode to their devices – a file that typically contains 3D printing instructions – notifying affected users that their printer is affected by a critical security issue.
This vulnerability could potentially allow potential attackers to control any Anycubic 3D printer worldwide affected by this vulnerability using the company's MQTT service API
The file downloaded from the hacked devices also asks Anycubic to open source the 3D printers, because the company's software "is inadequate."
“Your machine has a critical vulnerability, which poses a significant threat to your security. Immediate action is recommended to prevent potential exploitation.“
“You can disconnect your printer from the Internet if you don't want to be the victim of a hacker attack. This is just a message. You are not in any way harmed.“
According to the same text file, 2,934,635 devices downloaded this warning message via the vulnerable API.
See also: HackerOne: Has given away over $300 million in bug bounty programs
Customers who received this warning message are advised to disconnect their printers from the Internet until the company fixes the security issue.
Although Anycubic has yet to provide an official statement regarding this incident, some affected customers have shared an anonymous message on a 3D printer-focused forum, warning of two critical vulnerabilities affecting the company's products
AnyCubic's social media representatives are now collecting information (APP account names, CN codes, device logs, and the gcode file) from affected customers in order to "diagnose the issue."
The Anycubic app has stopped working, just hours after users reported that their 3D printers were displaying messages saying they had been hacked. Users trying to connect are seeing “network unavailable” error messages, as TechCrunch first reported.
Anycubic has around 1000 employees and is one of the most popular 3D printer brands on the market, with the company reporting that it has sold more than 3 million printers in over 120 countries.
See also: North Korean hackers target blockchain engineers with Kandykorn malware
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
What are the consequences of hacking a 3D printer?
Hacking a 3D printer can lead to serious consequences. First, hackers can control the production of printed objects by modifying their designs and specifications. Furthermore, hacking a 3D printer, as in the case of the hacked Anycubic printers, can have serious security. Hackers can use the printer to produce dangerous objects, such as weapons or explosives, without the owner’s knowledge. Finally, hacking a 3D printer can lead to the theft of copyrights. This can lead to significant financial losses for the rights holders.
Source: bleepingcomputer
