Dark Web Alert: Hackers Now Selling Canon’s Firewall Credentials On the Web.

OH-NO: Hackers Now Selling Firewall Access to Canon Inc on Hacking Forums.
Threat actors are reportedly offering root access to Canon Inc.’s internal firewall systems on underground hacking forums. According to security monitoring firm ThreatMon, an advertisement appeared on a popular dark web marketplace, claiming to provide administrator-level access to the Japanese camera giant’s network infrastructure.

The listing specifies “Firewall” access with “Root/Administrator” privileges, indicating potential for remote code execution and complete control over Canon’s network traffic filtering mechanisms. Communication with the seller is conducted via private messaging and Telegram channels, following standard operational security practices common on such forums.

Canon has previously experienced significant cybersecurity incidents. In 2020, the company confirmed a ransomware attack that resulted in the theft of employee data, including Social Security numbers, banking information, and other sensitive personal records.

Security experts recommend organizations implement defense-in-depth strategies, including multi-factor authentication (MFA), network segmentation, and privileged access management (PAM) solutions to mitigate similar threats. Regular security audits and penetration testing can identify vulnerabilities before malicious actors can exploit them.

As of now, Canon has not publicly confirmed the breach, and it remains unclear whether the listing represents legitimate access or a fraudulent claim. ThreatMon continues to monitor the situation, noting this type of access could potentially fetch tens of thousands of dollars on underground marketplaces.

Cybersecurity professionals remind organizations that firewall compromises can lead to extensive supply chain risks, as evidenced by numerous high-profile attacks targeting critical infrastructure and multinational corporations over the past several years.