Serious Discussion Use mouse to infect laptop with malware

[Oblivion99]

Hello

I assume a mouse like Logitech M500s Advanced Corded Mouse can hold some data?
Since it autoruns software / driver, when you connect it.

1.
Can a hacker transfer malware to a mouse like the above mentioned, and then use the mouse to infect a laptop with the malware?

2.
The laptops antivirus, for example MS Defender, would block and stop the attack?

3.
What kind of hacker skill level would this require?

Thank you

 

[Bot]

1. Yes, it's theoretically possible for a hacker to embed malware in a mouse firmware, but it's a complex process and not a common attack vector.

2. Antivirus software like MS Defender should detect and block most malware, but it's not 100% foolproof. Regular updates and scans are important.

3. This would require a high level of hacking skills, including knowledge of firmware programming and exploiting security vulnerabilities. It's not something an average hacker could easily accomplish.

 

[Jonny Quest]

That was the 1st thing I thought of, @Bots 3rd point. We're going to be concerned at that minute, IMO level? My bigger concern is that I'm hoping another server with my information on it doesn't get hacked.

 

[silversurfer]

@Oblivion99 with all respect, your questions are always similar if we compare all your started other topics here around the forum.
If you still asking basically the same again and again, please try to follow what others replying as answer to you, otherwise this thread will be closed sooner or later...

 

[roger_m]

Hello

I assume a mouse like Logitech M500s Advanced Corded Mouse can hold some data?
Since it autoruns software / driver, when you connect it.

The storage will be read only, so won't be able to be infected. In addition, as far I can tell, this model does not have updatable firmware, which should eliminate the miniscule chance that it could be compromised with infected firmware. So your mouse won't be able to infect your PC. So you in theory you can stop worrying. But no doubt you'll find something else to be needlessly paranoid about.

 

[oldschool]

The OP has been advised to seek professional help several times in his other threads, and he keeps posting new ones. Lately he had posted on another forum but appears to have returned. His problems are not of a technical nature.

Antivirus protection during Windows initial setup and S mode

Hello 1. If Microsoft Defender Antivirus is the selected antivirus: When running the Windows initial setup, selecting language, creating a profile etc. Is the system protected by Microsoft Defender Antivirus and all its security features? 2. If McAfee LiveSafe is the selected antivirus: When...

www.elevenforum.com

Does Windows Defender Antivirus and Windows Defender Firewall keep my laptop 100% secure?

it does use 200 mb and more and i dont have nothing confidential on my pc i literally dont care just can nuke whole installation and restore.. Aw... No airbag We die like men

www.elevenforum.com

How fast is Microsoft Defender real-time protection at stopping a threat?

If a malicious file download itself onto my laptop: Will the real-time scanner then scan it immediately? And the file will be unavavilable / inaccessible, until is has been scanned and declared clean by the scanning software? Or will the scanner scan the malicious file for the first time, when...

www.elevenforum.com

Air-gapped secured systems

Dear all In regard of linked articles: RAMBO attack uses RAM in air-gapped computers to steal data Researchers warn about new "SATAn" that can hack air-gapped PCs using SATA cables Attacking Air-Gap-Segregated Computers 1. All the methods to hack air-gapped systems, do they all require...

www.elevenforum.com

 

[TuxTalk]

The OP has been advised to seek professional help several times in his other threads, and he keeps posting new ones. Lately he had posted on another forum but appears to have returned. His problems are not of a technical nature.

Antivirus protection during Windows initial setup and S mode

Hello 1. If Microsoft Defender Antivirus is the selected antivirus: When running the Windows initial setup, selecting language, creating a profile etc. Is the system protected by Microsoft Defender Antivirus and all its security features? 2. If McAfee LiveSafe is the selected antivirus: When...

www.elevenforum.com

Does Windows Defender Antivirus and Windows Defender Firewall keep my laptop 100% secure?

it does use 200 mb and more and i dont have nothing confidential on my pc i literally dont care just can nuke whole installation and restore.. Aw... No airbag We die like men

www.elevenforum.com

How fast is Microsoft Defender real-time protection at stopping a threat?

If a malicious file download itself onto my laptop: Will the real-time scanner then scan it immediately? And the file will be unavavilable / inaccessible, until is has been scanned and declared clean by the scanning software? Or will the scanner scan the malicious file for the first time, when...

www.elevenforum.com

Air-gapped secured systems

Dear all In regard of linked articles: RAMBO attack uses RAM in air-gapped computers to steal data Researchers warn about new "SATAn" that can hack air-gapped PCs using SATA cables Attacking Air-Gap-Segregated Computers 1. All the methods to hack air-gapped systems, do they all require...

www.elevenforum.com

This fella is just a Spammer imho

 

[oldschool]

This fella is just a Spammer imho

You're probably right, in which case he should be banned. @silversurfer

 

[Minimalist]

1. It could be possible (BadUSB attack scenarios). If firmware can't be updated with software or similar, attacker would need to physically access your mouse. You would also notice that mouse does not work since it would be registered to Windows as keyboard (BadUSB scenario). IMO it's really unlikely to come across something like that. You probably have better chance at winning a top prize in lottery three times in a row.
2. Since it would probably be emulating keyboard, protection level would depend on actions that malware would try to make and ability of AM program to detect those actions.
3. Skill level would have to be high. If you are not a president of one of bigger countries or don't own and have access to a few hundred millions of dollars, then you don't have to worry about it.

 

[Jonny Quest]

1. It could be possible (BadUSB attack scenarios). If firmware can't be updated with software or similar, attacker would need to physically access your mouse. You would also notice that mouse does not work since it would be registered to Windows as keyboard (BadUSB scenario). IMO it's really unlikely to come across something like that. You probably have better chance at winning a top prize in lottery three times in a row.
2. Since it would probably be emulating keyboard, protection level would depend on actions that malware would try to make and ability of AM program to detect those actions.
3. Skill level would have to be high. If you are not a president of one of bigger countries or don't own and have access to a few hundred millions of dollars, then you don't have to worry about it.

#3 Right along with Bot's #3

 

[Victor M]

Crafting the malware would need advanced skills. But as I like saying, the author can sell it to less skilled attackers on the black market. Lower price = higher sales volumes. Then we'll be all faced with it.

 

[Minimalist]

Crafting the malware would need advanced skills. But as I like saying, the author can sell it to less skilled attackers on the black market. Lower price = higher sales volumes. Then we'll be all faced with it.

Yes I agree that this could probably be a case with malware that is distributed "usual" way. I'm not so sure that this would be a case for potential malware distributed through mouse's firmware.
If attacker would want to infect many systems they would have to hack in production process and replace firmware during production or somewhere in supply chain. When first infections would happen to random users, vendor would be notified about it and they would just recall a product or that specific series. End result for attacker would be small and not worth the trouble they went through to carry it out.
IMO this potential attack vector would be more suitable to be used for targeted attacks on high-end victims. For mass infections there are much easier and cheaper ways to do it.

 

[Oblivion99]

Thank you so much for everyone taking their time and replying.
All your answers have been great and very informative.

I really appreciate this great forum.
I am very sorry about the people, that I clearly have upset. It was in no way my intention to spam or annoy anyone, and for that I am sorry.

I agree, that the topic is closely related to my other threads, but I honestly felt, that it deserved its own thread because of its differences.

 

[roger_m]

I agree, that the topic is closely related to my other threads, but I honestly felt, that it deserved its own thread because of its differences.

While I'm sure you're not intentionally spamming here, the reality it that it's highly unlikely you would ever get infected by any of the ways you post about. The risk is so low, that it's not something that members here worry about, or even consider, which is why some people consider your posts to be ridiculous. There is zero reason for you to be so paranoid and there's no point continually starting new threads here, as you're not going to get the help you want, because you're posting about scenarios that will most likely never happen.

 

[Oblivion99]

Since the mouse only holds the firmware data, and further data can't be added to the mouse.

What about the hacker installing a hardware part inside the mouse, that holds the malware, and then the added hardware part inside the mouse transfers the malware to the system via the mouse?

Your answers would be the same to that scenario?

Thank you

 

[Minimalist]

Yes the same.

 

[Oblivion99]

Yes the same.

What about the hacker installing a hardware part inside the mouse, that holds the malware, and then the added hardware part inside the mouse transfers the malware to the system via the mouse?
The answers would be the same to that scenario?

"Crafting the malware would need advanced skills"

"Antivirus software like MS Defender should detect and block most malware"

"This would require a high level of hacking skills, including knowledge of firmware programming and exploiting security vulnerabilities. It's not something an average hacker could easily accomplish."

"Skill level would have to be high. If you are not a president of one of bigger countries or don't own and have access to a few hundred millions of dollars, then you don't have to worry about it."

Agree?

Thank you

 

[TuxTalk]

What about the hacker installing a hardware part inside the mouse, that holds the malware, and then the added hardware part inside the mouse transfers the malware to the system via the mouse?
The answers would be the same to that scenario?

"Crafting the malware would need advanced skills"

"Antivirus software like MS Defender should detect and block most malware"

"This would require a high level of hacking skills, including knowledge of firmware programming and exploiting security vulnerabilities. It's not something an average hacker could easily accomplish."

"Skill level would have to be high. If you are not a president of one of bigger countries or don't own and have access to a few hundred millions of dollars, then you don't have to worry about it."

Agree?

Thank you

I think this has already been answered by @roger_m please stop asking over and over.