中国打印机制造商与官方司机一起销售了分布式的偷走比特币恶意软件

5月19日，中国新闻媒体新闻报道说，总部位于深圳的打印机公司Procolored一直在与官方驾驶员一起分发偷窃比特币（BTC）恶意软件。

A Chinese printer manufacturer has been caught distributing Bitcoin-stealing malware alongside its official drivers, local media outlet Landian News reported on May 19.

当地媒体媒体Landian新闻报道，一家中国打印机制造商与其官方驾驶员一起分发了偷窃比特币的恶意软件。

Shenzen-based Procolored, a hardware company known for its 3D printers, UV printers and other imaging devices, was found to be distributing malware-ridden drivers using USB drivers and uploading the compromised software to cloud storage for global download.

一家以深圳为Procolored，这是一家以3D打印机，UV打印机和其他成像设备而闻名的硬件公司，它正在使用USB驱动程序分发恶意软件驱动器，并将折衷的软件上传到云存储中以供全球下载。

The issue was first reported by YouTuber Cameron Coward, whose antivirus software detected malware in the Procolored drivers while testing a UV printer. The software flagged the drive as containing a worm and a trojan virus named Foxif.

该问题首先是由YouTuber Cameron Coward报告的，他的防病毒软件在测试UV打印机时检测到了Procoled驱动程序中的恶意软件。该软件将驱动器标记为包含蠕虫和名为Foxif的木马病毒。

After encountering issues with the antivirus tool, Procolored maintained that the detection was a false positive and deleted the infected drivers from its storage on May 8, re-scanning all files.

在使用防病毒工具遇到问题后，Procolored坚持认为检测是假阳性的，并于5月8日从其存储空间中删除了被感染的驱动程序，从而重新扫描了所有文件。

Analysis by cybersecurity firm G-Data revealed that most of Procolored’s drivers were hosted on the file hosting service MEGA, with uploads as old as October 2023. Analysis of those files confirmed that they were compromised by two distinct pieces of malware: backdoor Win32.Backdoor.XRedRAT.A and a crypto stealer designed to substitute addresses in the clipboard with those controlled by the attacker.

网络安全公司G-DATA的分析表明，Procolored的大多数驱动程序都是在文件托管服务中托管的，上传的上载与2023年10月一样古老。对这些文件的分析证实，这些文件被两种不同的恶意软件妥协：Backdoor win32.backdoor.xredrat.a和Crypto Sheter by Cripto the Clipseres clipboarders the Contripsers contripsers contertute clipboards contertute contertute clipsports corterty optocters to的分析。

The cybersecurity company contacted the hardware producer, who attributed the malware to a supply chain compromise, explaining that the malicious files were introduced through infected USB devices before being uploaded online.

网络安全公司与硬件生产商联系，后者将恶意软件归因于供应链折衷，并解释说，恶意文件是通过受感染的USB设备在网上上传之前通过受感染的USB设备引入的。

“We have been the victims of a third-party software vulnerability that led to the inclusion of malicious code in some of our printer drivers,” a Procolored spokesperson told G-Data.

一位伪造的发言人告诉G-data：“我们一直是第三方软件脆弱性的受害者，导致某些打印机司机将恶意代码纳入其中。”

The company added that it had taken immediate steps to remove the affected drivers and notify relevant parties. Procolored also planned to implement enhanced security measures to prevent similar incidents in the future.

该公司补充说，已经立即采取了措施来删除受影响的驾驶员并通知相关方。 Procolored还计划实施增强的安全措施，以防止将来类似的事件。

A total of 9.3 BTC worth over $953,000 have been stolen, according to crypto tracking and compliance firm Slow Mist, which described how the malware operates in a May 19 X post.

根据加密跟踪和合规性公司慢雾的数据，总计9.3 BTC的价值超过953,000美元，该公司在5月19日x帖子中的运作方式描述了如何运作。