Protecting Our Customers: Security Update

Incident

On Thu, May 22, 2025, we identified that certain software packages were compromised by a malware variant known as the Floxif worm.

 

Our investigation indicates the virus may have been introduced during the transfer of product software from USB to our web hosting, which could have led to the XRed backdoor being installed on some Windows devices.

 

There is no evidence linking our software to cryptocurrency theft. The malware's command-and-control servers have been offline since February 2024, and we have not received any reports from users regarding crypto-related issues.

Resolution
As soon as the issue was identified, we removed all software from the Procolored official website.

 

We then carried out extensive security testing across our entire product line. This included a full malware scan and re-verification of every file within the F8, F13, F13 Pro, V6, V11 Pro, and VF13 Pro software packages using G Data*, VirusTotal, and other independent tools.

 

All current packages were confirmed clean**, with no viruses, malware, or unauthorized code present. Only after passing these checks were the verified software packages re-uploaded to our site. 

* G Data’s latest analysis: https://www.gdatasoftware.com/blog/2025/05/38200-printer-infected-software-downloads

We also updated our website and notified customers through https://www.procolored.com/pages/support-resources where the safe versions could be redownloaded. For users who reported issues, our engineers provided one-on-one support and solutions.

Commitment

We recognize that past methods of distributing software, including the use of USB transfers, did not provide the level of oversight our customers expect.

 

Although the exact source of the malware is still under review, we recognize that this incident created concern and inconvenience for our community. Our customers place their trust in us, and we regret that our safeguards at the time did not meet that trust. We are committed to rebuilding that trust through stricter controls, greater transparency, and ongoing support, and we will continue to take full responsibility for resolving any issues that arise.

Future Measures

This incident has prompted us to strengthen internal controls for all future software releases and enhance our quality assurance processes. Our goal is to stand firmly behind product quality while prioritizing customer safety and satisfaction.

 

Our commitments include:

  • Certified Software Provider - Our software, PrintEXP.exe, is supplied by Shenzhen Hosonsoft Co., Ltd., a certified developer with ISO/IEC 27001 information security credentials. Their certification is independently verifiable online, and documents can be viewed here http://qian.xjyrz.com/certerp/xjyr/cert/search?CertID=19823ISF0178R0M.
  • Official Hash Values - We now publish official hash values on our website so users can verify downloads have not been tampered with.
  • Open to Independent Testing – We welcome independent testing of our machines and software, and our team is available to provide access and support as part of our commitment to transparency.
  • After-Sales Support - Our global after-sales team is dedicated to resolving any software or hardware issues quickly and thoroughly.
  • U.S.-Based Support – In addition to our global presence, we maintain a U.S.-based warehouse, subsidiary, and local engineering team to ensure dependable support for customers in North America.

We remain committed to protecting our customers and their trust, and we will continue to prioritize security, transparency, and reliable support in every step forward.