Unknown USB Drives
- MARCH 18TH, 2024
- 2min read
Introduction
USB drives have become indispensable tools for personal and professional use for storage and transfer of data due to their portability and ease of use. It is crucial to be aware of the significant security risks associated with plugging unknown USB devices into our computers.
Risk of Unknown USB Drives
- Malware: USB drives can carry malicious software that can infect the computer system with malware such as ransomware, worms, trojans, etc. This can lead to data theft and unauthorised access leading to complete system control.
- Network Compromise: USB drives can act as network sniffers, create backdoors for future access, and spread laterally through connected systems.
- Physical Damage: Malicious USB drives can cause physical harm to hardware. USB Killer devices contain capacitors that charge from USB power and release high voltage discharge back into the computer, which can instantly destroy USB controllers, motherboard components, CPU and RAM, and connected peripherals.
Best Practices
- USB Security Tools: Utilise USB security tools that can analyse and block malicious USB activity, such as unauthorised file transfers or device emulation.
- System Updates: Keep operating systems and security software up to date to patch known vulnerabilities that could be exploited by USB attacks.
- Trusted Sources: Ensure that USB drives come from reputable sources and treat every unfamiliar USB device as a potential threat.
- Antivirus Software: Ensure the device has updated antivirus software to scan the USB immediately upon insertion.
- Disable Autorun: Disable Autorun to prevent malicious code on infected USB drives from opening automatically when inserted.
- Keep Personal and Business USB Drives Separate: Avoid using personal USB drives on corporate devices and vice versa.
Explore more CIL Advisories
Phishing Emails
IntroductionPhishing attacks are becoming increasingly sophisticated, with malicious actors exploiting current events like the Paris 2024 Olympics Games to run…
DECEMBER 16TH, 2024
Read More
Preventing Deep Fake Scams
IntroductionMalicious actors always find creative ways to defraud unsuspecting individuals; deep fake scams are one of the latest ways with…
DECEMBER 9TH, 2024
Read More
Trouble Looms: Ransomware Attacks on the Rise
IntroductionRansomware is a type of malware which prevents you from accessing your device and the data stored on it, usually…
DECEMBER 2ND, 2024
Read MoreNever miss a CIL Security Advisory
Stay informed with the latest security updates and insights from CIL.