A few months ago, this became a minor topic of discussion in Japan: it seems there are Chinese-made lightsabers on the market that come preloaded with a large number of fonts, as well as SD cards included with Proffie units that contain EXE files among their fonts.
Normally, there shouldn’t be any EXE files in a font folder, so it might be wise to exercise caution.
I rarely purchase ready-made Chinese products or SD cards myself, so I don’t actually own any of these items, but I’d like to hear the opinions of those in the know.
Thanks for sharing this! I wouldn’t have thought to look for it and I know better.
The good news is that autorun has been disabled since Windows 7, so they just sit there harmless unless double clicked, which I’m sure is what they’re counting on based purely on curiosity or accidental, click.
It’s important to note that by default windows does not show file extensions so it could be easily missed. If this is sitting on your Lightsaber, it doesn’t matter to ProffieOS since it doesn’t read executables from an SD card. The target here is your computer, so extreme caution should be used when reading the card.
While I have a couple cards that came loaded with fonts similar to this, the fonts I actually run on my sabers are purchased so I’m probably not the typical target. But, I did check all the cards and backups I had and didn’t find any of these personally.
Good habit to show file extensions and use a good antivirus scanner that can autoscan removable media… and better yet don’t trust cards of unknown or questionable origin.
1 Like
I had come across this once with a SD card that came bundled with a Proffieboard from AliExpress, and Windows Defender managed to catch them instantly, so I have to imagine they’re almost certainly malicious. If you still have access to those .exe files, I’d be curious as to what virustotal has to say about them (I, like an idiot, just nuked the sd card immediately instead of investigating)
2 Likes
Same here. I purchased a single proffie with SD card from AK Sabers on AliExpress cause I wanted the fonts for my curated collection of crappy default/included fonts. Windows Defender also immediately caught mine and I think I remember the ID was MIME disguised trojan, and very old. I quarantined it, got the fonts and then nuked it all.
To add insult to injury, the SD card wasn’t fast enough to use. I remember thinking at the time they were going to have to get a lot more sophisticated to successfully get to one over on lightsaber nerds!
3 Likes
Thank you for your reply.
Since SD cards containing a large number of fonts are sometimes included with installation requests, I’ll continue to be careful.
So this means just any .exe file in an individual sound font folder might have them, or is it under some weird named folder like [attention please]?
There were several copies in the one I got. One in the root and some in the fonts. I just scanned the whole drive and they all quarantined.
So search for “*.exe”, select all, delete, confirm delete. Problem solved? Right ?
Obviously on your SD-drive only!
1 Like
Theoretically, yeah, but if a malicious actor already had their hands on the files, who else knows what they’ve done. I wouldn’t recommend messing with any of it, tbh.
That’s good advice.
If you are confident in these matters thought its an unsophisticated attack that is easily cleansed. I doubt it was successful on anything other than old XP machines. There are some halfway decent fonts in there, like AsokaTM (The Mandalorian). “A Mandalorian and a Jedi? They’ll never see it coming.” 
I had the exact same issue with an AliExpress Proffieboard order (from “Lightsaber store Official”) back in March. The .EXE file appeared to be an old worm that replicates itself to flash drives. So my guess is that it’s either an infected computer at the main distributor of these Proffie font files, or a malicious intent. Or both.
3 Likes
I would ensure that you buy from a reputable vendor such as DarkWolf, Vire Sabers or if you are in my neck of the woods AusSabers, I’ve never seen any issues with those sd cards.
I’ve bought Proffies from that AliExpress store for years without issues, and so have a few friends of mine. I’ve never had any issues with the boards themselves, just the SD cards now. Fortunately, I can still get my hand on SD cards separately here in the EU. There’s always The Saber Armory if things go south with those boards though.