Rare BadUSB attack detected in the wild against US hospitality provider

[silversurfer]

Content source

https://www.zdnet.com/article/rare-badusb-attack-detected-in-the-wild-against-us-hospitality-provider/

Hackers use snail-mail to send target company an envelope with a malware-laced USB thumb drive.

A US hospitality provider has recently been the target of an incredibly rare BadUSB attack, ZDNet has learned from cyber-security firm Trustwave.

The attack happened after the company received an envelope containing a fake BestBuy gift card, along with a USB thumb drive.

The receiving company was told to plug the USB thumb drive into a computer to access a list of items the gift card could be used for.

But in reality, the USB thumb drive was what security experts call a "BadUSB" -- a USB thumb drive that actually functions as a keyboard when connected to a computer, where it emulates keypresses to launch various automated attacks.

Trustwave, who couldn't reveal the target company's name for confidentiality reasons, said the victim recognized the attempted hack and called it in to investigate the incident.

In a report published today and shared with ZDNet, Trustwave said that once they plugged the BadUSB into a test workstation, the BadUSB triggered a series of automated keypresses that launched a PowerShell command.This Powershell command downloaded a bulkier PowerShell script from an internet site and then installed malware on the test machine -- a JScript-based bot.

 

[HarborFront]

You can prevent BadUSB in WIn10 Pro by editing in Local Group Policy Editor following the steps below

How to Fix the Critical BadUSB Security Flaw in Less than 10 Minutes

BadUSB exploit is considered one of the worst IT vulnerabilities ever found. Luckily, you can stay safe with a few simple steps you can follow in your Windows operating system.

heimdalsecurity.com

Alternatively, HMPA also has a a feature to prevent BadUSB. Similarly, using G-DATA's USB Keyboard Guard from below

USB Keyboard Guard | Reliable protection against manipulated USB stick | G DATA

Protect your PC and your data against BadUSB by using USB Keyboard Guard by G DATA - irrespective of your antivirus program. Download it for free now.

www.gdata-software.com