208
Two never-before-seen tools, from same group, infect air-gapped devices
(arstechnica.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 09 Oct 2024
208 points (97.3% liked)
Technology
58633 readers
3591 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
People literally just drop usb drives in the parking lot of places they want to compromise hoping some idiot will plug it into a machine inside. So they might want to check their security tapes of the parking lot.
I’ve sent a usb drive through the washing machine a couple times. Still works fine. So can’t imagine rain bothers them too much.
There are USB cables that do this now. Air capped machines need to be better about sanitizing USB.
You say that like it's some common occurrence. Is it? As far as I know the CIA, FBI, or NSA (Can't remember) did a test where they did that in their own parking lot and lots of people fell for it. But is there any evidence of it being done maliciously?
Even if it isn't an intentional attack you don't want people bringing God knows what on USB sticks that may or may not just be infected from the users own home PC. USB storage devices are lovely targets.
But yeah the South Korean military got infected by a soldier plugging in a planted USB stick.
I think the narrative of a targeted attack is easier to sell though. Make it us vs them and people grasp the concept a little better. This is very common in information security training in a lot of fields in my experience.