1. TechSpot is dedicated to computer enthusiasts and power users. Ask a question and give support. Join the community here.
    TechSpot is dedicated to computer enthusiasts and power users.
    Ask a question and give support.
    Join the community here, it only takes a minute.
    Dismiss Notice

Researchers show how fax machines can be easily hacked

By midian182 · 4 replies
Aug 13, 2018
Post New Reply
  1. Israeli cybersecurity firm Check Point presented a paper on the fax machine exploit, dubbed Faxploit, at the annual Defcon hacker event in Las Vegas yesterday. It found that all an attacker would need is a fax number, which is used to transmit an image—or a file that the machine believes to be an image—that’s embedded with malicious code.

    Check Point used an HP Officejet Pro all-in-one printer/fax machine to demonstrate the vulnerability, though HP issued a patch before the findings were revealed. But as the problem lies in the fax protocol, devices from other companies are likely to also be at risk.

    Because most modern fax machines are all-in-one units connected to home or office networks, the malware payload sent by fax could potentially spread across an entire connected network. Moreover, the researchers said that as many of these units are so old and there are so few of them, some manufacturers feel they’re not worth patching.

    Check Point is advising companies to regularly check if there any firmware updates available for their all-in-one fax machines and apply them asap. It also recommends placing the fax devices on a separate, secure network, though this will likely be an inconvenience and limit their functionality.

    “Once unauthorized access is gained, network segmentation can provide effective measures to mitigate the next stage of intrusion into a network and limit the spread of the attack by lateral movement across it,” said Check Point.

    Both the US and UK medical sectors rely heavily on communications via fax, and there are said to be 17 million fax machines still in operation in America.

    Permalink to story.

     
  2. Uncle Al

    Uncle Al TS Evangelist Posts: 5,703   +4,042

    Wow ...... millions of fax machines still in use? Astounding .....
     
  3. mls067

    mls067 TS Enthusiast Posts: 45   +30

    Welcome to the US government and also hospitals!
     
    Reehahs and Drew Valadez like this.
  4. Danny101

    Danny101 TS Guru Posts: 848   +329

    I thought we would be on email by now. I suppose fax is easier.
     
  5. jobeard

    jobeard TS Ambassador Posts: 13,112   +1,593

    Fax is point to point, whereas all email is store-n-forward at least on two servers. The man-in-the-middle is always a problem for all communications, but on the whole, excepting this report, fax is more secure than email.
     

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...