Devices and protection
The USB drive in the parking lot
A USB drive lies on the ground outside the office, labeled “Salaries.” Curiosity is a powerful thing.
1 min readExplainer
The short version
A found USB drive is one of the oldest tricks in security. Plugging it in can hand control of a computer to whoever left it there.
Why it works
Some USB devices are built to look like flash drives but act as a keyboard the moment they are plugged in, typing commands faster than anyone can see. Others carry files designed to be opened. Either way, the attacker only needs one curious person.
Dropping drives is an old technique, and security researchers have shown again and again that people pick them up and plug them in. Stuxnet, one of the most famous attacks in history, is believed to have reached its target on USB drives.
Cables and chargers too
Public charging ports and unknown cables can carry data as well as power. A tampered cable can look identical to a normal one.
What to do
- Never plug in a drive you did not buy or were not given by someone you trust. Hand found drives to IT.
- Use your own charger in public places, plugged into a power outlet rather than a USB port.
- Use OneDrive or SharePoint to move files instead of USB drives where you can.
- For businesses: consider blocking USB storage on computers that do not need it, especially shop-floor and front-desk machines.
Talk to us about your technology
Tell us what you run today and what is getting in the way. We will get back to you about how we can help.