I like to think I’m fairly competent with computers but I don’t understand how this is a thing. see https://www.mitnicksecurity.com/blog/the-latest-malware-threat-the-usb-ninja-cable
In: 2
USB port can receive storage or hardware devices such as a mouse, keyboard, camera, etc. storage is storage; others are called a HID (human interface device) in windows. any device upon connection gives a signal so computer knows what to do with it – for hardware it installs device drivers and storage gets mounted as an extra drive.
problem with ninja cables or rubber ducky usb drives is that they have HID component hidden, probably along with some storage available so custom code can be loaded. upon plugging in such usb stick or a cable, user is under impression that it is a normal stick or a cable, while this special hardware hides another component that will allow auto-execution of stored code thanks to the automated activation of those HID devices.
once attackers can make you run their code on your machine without you knowing, sky is the limit.
Latest Answers