Most of you reading this article probably already know that most devices that connect to Internet, are not safe. Each computerς, οποιοσδήποτε server, κάθε συσκευή μπορεί να παραβιαστεί και να αναδιαμορφωθεί για κακόβουλους σκοπούς, πολλές φορές χωρίς τη γνώση του ιδιοκτήτη. Έτσι τα USB stick are no exception.
Some time ago we posted that security researchers discovered a way to rewrite USB firmware sticks, making them malicious to their owners. This particular vulnerability is not detected by any security software.
According to Wired, the researchers decided to act. Right now the hack that rewrites the firmware of a USB stick is freely available on the internet. The code leaked directly from security researchers who believe that by publishing information they will force companies to fix the vulnerability.
High level agencies like the NSA may already have access in said code and thus they will be able to exploit the vulnerability. However, now that everyone knows about the hack companies are forced to take action.
But what can be done with a hacked USB stick? Is that so serious?
By connecting a compromised USB stick to a PC, crooks can copy all your keystrokes, hide malware on your computer, or run injections, potentially spreading the malicious code to other USB devices.
As we mentioned above, infected USB devices are virtually undetectable and can not be repaired with a format.