BAD USB: Attack on a SHUT DOWN Computer | Real Experiment

Поделиться
HTML-код
  • Опубликовано: 20 янв 2025

Комментарии • 148

  • @bluegizmo1983
    @bluegizmo1983 Год назад +34

    11:00 That is NOT a surefire way to protect your computer from a BadUSB device. Once the attacker realizes that the computer only allows whitelisted devices, it's trivial to spoof the VID and PID of the BadUSB to make it appear as one of the whitelisted devices.

    • @Lilyene0
      @Lilyene0 Год назад +6

      Wouldn't the attacker need to somehow find out the VID and PID of the whitelisted devices though?

    • @kesslerkevin
      @kesslerkevin Год назад +1

      @@Lilyene0 inference of these devices should be pretty easy to find. Social Engineering would uncover a device used on prem, in-person, or even over the phone. one could even go as far as talking to contractors to uncover information with social engineering. This is why security policies should be implemented by IT.

    • @christopher480
      @christopher480 Год назад +1

      these guys dont really know what they are talking about......these vids are just a way for them to talk you into a service you dont need.

    • @holdmyrpg723
      @holdmyrpg723 2 дня назад

      @@Lilyene0yeah

  • @charleshines2142
    @charleshines2142 Год назад +23

    Also if someone suspects that this happened, they could turn their router off or unplug the computer from the network while they reinstall the OS. Sure there are ways to get rid of these things without reinstalling. I just prefer a clean install so I know that I am rid of it and anything else that may have been installed that I did not notice any signs of. It also helps in case the malware is a newer variant that antivirus does not yet recognize. One thing to remember about malware is it can be tricky to pick through and remove all traces. With a clean install you know it is gone and you didn't spend your day searching the registry for it. The other nice thing about a clean install is that some malware reinstalls if you miss any. That doesn't happen with a clean install. Instead you know it is gone.

    • @5247814
      @5247814 Год назад +2

      But once this happened the attacker will have already extracted sensitive information such as passwords stored in the browser, payment information, and encryption keys. None of the remediations you mentioned will fix that.

    • @ClickClack_Bam
      @ClickClack_Bam Год назад +1

      Be clear about what a "clean install" is.
      Thinking that you can just run your Windows restore backup is NOT a "clean install".
      Virus routinely hide inside backup & restore files & you'll simply reinfect yourself over & over if this is the case.
      A "clean install" means you have a separate introduction to your computer that COULDN'T have possibly of been infected with your current issue.
      When sophisticated attacks always being thought up, even backups from the cloud & the network can be compromised.

    • @christopher480
      @christopher480 Год назад

      @@ClickClack_Bam if you dont even know what a clean install is then this vid is well beyond your skills.

  • @chickeninabox
    @chickeninabox Год назад +70

    Put your computer's ports inside a steel safe

    • @BurninGems
      @BurninGems Год назад +3

      Hot glue into the USB ports and no external devices would be better.

    •  Год назад

      Or fill the ports with building foam, silicone, hot glue, etc., alternatively short the data lines.

    • @hooshawn
      @hooshawn Год назад

      Store your data in a black box kept in a data centre not connected to anything. Heck you could even call it the Box 3

    • @Art3mis_games
      @Art3mis_games Год назад

      Chastity cage

    • @erk_viewer
      @erk_viewer Год назад

      Block them vua windows advanced swttings XD

  • @YaFunklord
    @YaFunklord Год назад +3

    If anyone else has physical access to your machine, or if you run any untrusted code (javascript etc) it is game over.
    How many times does it need repeating?

  • @dodge1629
    @dodge1629 Год назад +4

    11:01 That's doesn't matter, it's possible to figure out the vendor ID/Product ID of an allowed device and program on a BAD USB...

  • @adamcrux6829
    @adamcrux6829 Год назад +8

    I'm one of the lucky people that have had one of these flash drives sent to me from a fake Amazon...
    I opened it up first thing before doing anything else because the letter that came packaged with it looked sus as hell. If it was just a flash drive with no letter I might have just plugged it into my PC. It had a ESP32 Arduino board in it but I think something went wrong when they flashed it because I got corrupted data when I dumped the firmware. I even tried plugging it into an old laptop when I failed to dump any data from it but it didn't do anything. I've since repurposed it and have used it for various tinkering projects so I'm kinda glad they sent it to me. Because in the end I just got a free Arduino board out of it.

    • @Jaxx7594
      @Jaxx7594 Год назад

      An esp32 arduino board? Esp32's do stuff with wifi (as you probably know since you seem knowledgable on this stuff) if i remember correctly. Not sure why they wouldnt send a duckyscript usb to just use cmd to grab wifi passwords and send it through a webhook rather than try hack it lol, and how were they gonna try send the pcap file? Doubt they would have been able to do much to you even if they flashed it correctly if it was just an esp32

  • @lukedev82
    @lukedev82 Год назад +5

    SumSub is filling the Disrupt sized hole in my heart!

  • @Draxi_1
    @Draxi_1 Год назад +15

    Is the device whitelist enough protection? Isn't there some sort of passthrough bad usb that would have a female usb port on one side thay you would plug in the original peripheral and it would clone its ID and other properties so it would bypass the whitelist?

  • @Jakku_Azzo
    @Jakku_Azzo Год назад +15

    Thank you Elliot and SumSub 💯

  • @mohinderkaur6671
    @mohinderkaur6671 Год назад +2

    No malware needed! The protection software is the malware as it make the product so hard to use its unusable. True for most corporate computers.

    • @5247814
      @5247814 Год назад

      Exactly! Clicking an extra modal window or entering a secure password is exactly the same as having all of your passwords and financial data stolen.

  • @Pretended1168
    @Pretended1168 Год назад +31

    Nice Video. Unfortunately, even computers without internet (and data) are not safe. There are also USB sticks that contain a capacitor that will destroy your entire PC. So only do this if you know what you are doing.

    • @BenEehayeh
      @BenEehayeh Год назад +4

      William Binney, Technical Director at NSA, retired, stated, "When you need to compose a secret message to send through a network, keep it small, 140 characters, and use pencil and paper."

    • @shadowe5067
      @shadowe5067 Год назад

      Best way to be safe is not to turn off your phone but unplug the battery

    • @BenEehayeh
      @BenEehayeh Год назад +1

      @@shadowe5067 2006 for sale, msrp $600, flip phone that doesn't need a battery to use gps and make phone calls, collecting energy from the air.
      Good luck unplugging your battery.

    • @Aera223
      @Aera223 Год назад

      Using superglue to "brick" the USB ports is possible, as well as gluing the keyboard and mouse USBs to the PC.
      (Ofc, it'll make replacing them tricky tho)

  • @jason71how
    @jason71how Год назад +2

    How would these attacks fair up against immutable OSes?

  • @Phryj
    @Phryj Год назад +7

    A simple OS-level fix would be to always inform the user that a new "keyboard" was detected and to stop keystrokes from going through.

  • @BigDogEnergy-69420
    @BigDogEnergy-69420 Год назад +2

    11:11 Uhhh you can just easily re-program the vendor ID and product ID on the arduino. If this is supposed to be a cybersecurity education channel, you shouldn't spread misinformation, especially the claim that it is a "perfect solution". Please be better.
    Edit: Also VID and PIDs aren't exactly secret, there's a public list of them.

  • @THD1083
    @THD1083 Год назад +3

    I actually made my own to run non-maliciouse code(For a Demo of what these could do).Realistically they are so small I instead grabbed a plug in wired keyboard and directlly connected the micro usb.

    • @Aera223
      @Aera223 Год назад

      I'd like to use one to automate startup and preconfig of a Live OS

  • @whykaif
    @whykaif Год назад +1

    Suppose you have Virus,malware file in your PC and you don't know. Does that also gets backed up to your cloud storage(Onedrive)

  • @darknessblades
    @darknessblades Год назад +3

    What would this attack do on a PC where you are not logged into a admin account?
    nearly all video's/articles do not show this.

    • @HappyPurpleFella
      @HappyPurpleFella Год назад

      To my knowledge there would be little to no difference in what could be done.

  • @GraniteInTheFace
    @GraniteInTheFace Год назад +3

    Has anyone created a program that disabled the usb slots everytime the corresponding usb was unplugged? And that you had to type in a password to reactivate it?

    • @MStrong95
      @MStrong95 Год назад +2

      This seems like a good idea and hopefully some programmers who need new ideas for projects take inspiration

    • @alfonzo7822
      @alfonzo7822 Год назад

      That's an interesting concept, haven't heard of anything that's been created like that.

  • @sjoer
    @sjoer Год назад +1

    You can actually change the firmware that runs on a USB stick, this way you can just repurpose generic USB flask drives and program the controller to also expose a HID device when needed!

    • @sjoer
      @sjoer Год назад +1

      And no, filtering by device ID is not a failproof way when you inject your own HID devices, you could just pretend to be any other device you wanted or even bruteforce an ID that does work!

  • @micah2936
    @micah2936 Год назад

    I would have designed a dedicated PCB for this and programed it as a USB hub, so there will be a flash drive, and a keyboard in one. The user will think it’s a flash drive and use it as normal and unknowingly inject the malware into multiple devices as they transfer files from one device to another. The malware will do its job behind the scenes with low risk compromising tasks such as fetching personal data which could be sold such as email addresses, and ad data.
    I don’t think this would be hard to do…. I’ve never done it and I never would, but knowing is possible and how it’s possible is the first step to prevention

  • @therealb888
    @therealb888 Год назад +3

    10:07 Delayed RCE is such a simple yet checkmate attack!.

  • @holdulv
    @holdulv Год назад +5

    maybe you should hide the name of these usbs as I found so much information that a newbie could make an attack on someone by just using a USB. but anyways the video was great and the editing is just one of the best I have ever seen. and btw thanks for making these videos as it helps outers to get better at the security

    • @BenjaminHari
      @BenjaminHari Год назад +2

      It's funny how they were trying to hide executed code by blurring but then not hide the cheap ATMEGA microcontrollers. Not to mention the info on how to do BadUSB and even pre-made scripts are available freely on RUclips and other sites.
      Instead of trying to keep malicious people away (near impossible) they should instead teach people on how to protect themselves better which they did but on very basic level though.

    • @marcuspvxea
      @marcuspvxea Год назад

      @@BenjaminHari Because you can just get the same results in one google search.

  • @ZEMRALEX
    @ZEMRALEX Год назад +4

    I recently got into hardware stuff and made similar thing with my Raspberry Pi Pico, "macropad"
    cool thing if you like to tinker

  • @hufficag
    @hufficag Год назад +1

    I teach English in China. Chinese software and Chinese computers in a war for domination, it's so convoluted. That's why when a student asked me to scan his semester's worth of homework, I said do it yourself. I installed the printer scanner software on his laptop but it's being blocked by something. Oh well, his problem, not mine.

  • @therealb888
    @therealb888 Год назад +1

    7:20 You sure it's not possible to extract code from arduino?
    It can be trivial to extract & disassemble such mcu code.

    • @AlexanderSama
      @AlexanderSama Год назад +2

      Yeah, don't know if Eliot meant that specific code, but generally it is possible to get the original code from an arduino after the compilation process. You'll need a few steps to get the HEX, then a disassembler, and finally translate it from assembly to C++

    • @wackymoder
      @wackymoder Год назад +2

      Elliot is minorly lazy and unknowledgeable.

  • @BurninGems
    @BurninGems Год назад

    I sat through a sumsub ad! Ill never get that 12 minutes back!

    • @christopher480
      @christopher480 Год назад

      exactly and thats why he gets a thumbs down a reported for misinformation.

  • @georgeodriscollvideos7740
    @georgeodriscollvideos7740 Год назад +2

    You can use a USB data blocker to stop any malicious code been sent to the computer .

    • @erikslot7023
      @erikslot7023 Год назад

      There is ways around that 🙂

    • @sionguz450
      @sionguz450 11 месяцев назад

      ​@@erikslot7023theres no ways when theres no data pins haha

  • @TradieTrev
    @TradieTrev Год назад +4

    Obscurity over security ;) If you setup your machine in a non typical way, she'd win. How about the intel management hacks?

    • @eriottomakurashi
      @eriottomakurashi Год назад

      If u are a nobody most probably you will be safe, but if u are a relevant person, lets say an owner of a finance company or some lesser, but still important role… well u could still get somebody trying to make a personal attack on your pc well ur non-typical way has most likely more mistakes and vulnerabilities than a typical windows pc

  • @samuellourenco1050
    @samuellourenco1050 Год назад

    It is important to state that msiexec is a major security hole, but M$ doesn't give a crap. The best course of action is to replace that executable by a dud.

  • @t0maz.m
    @t0maz.m Год назад

    What about virtual machine? Are they programed so they escape it?

  • @TheCoolestGuyEverLol
    @TheCoolestGuyEverLol Год назад

    Can you please make a video about if there is flash drives that already affect your computer after plugging in and then out and still counting as its plugged in using wifi,
    And if so. Can you please make a video how it looks like or

  • @thefreeman1970
    @thefreeman1970 Год назад

    So lets say I have this Huge plush Enter button that I do not trust since I bought it from Ali Express. How do I put the device under surveillance? Do I have to use a Keylogger to know whats being typed by the device or are there any better methods?

  • @frosthoe
    @frosthoe Год назад

    As a gamer It only takes 15 minutes to re-install windows and and a few more for drivers...Run a spring clean/format/ O.S reinstall annually...NO MATTER WHAT.
    But if i worked fromhome on mah pc , geez what a nightmare.

  • @MartinMcAvoy
    @MartinMcAvoy Год назад +1

    Most decent AV conducts a scan on any connected external drive. Why didn't you mention this?

    • @realfun7188
      @realfun7188 Год назад

      Because the vulnerabilities in the video werent known by AV companies at the time the attack was being implemented.
      An AV scan likely wouldn't have detected it.

    • @MartinMcAvoy
      @MartinMcAvoy Год назад +1

      ​@@realfun7188 Not really true. Good AV companies invest vast amount of money on global intel, to report, test and provide signatures for dangerous code. The updates happen in real time. It is possible for zero day code to be created that would defeat any AV. Stuxnet would be a good example but this is rare and expensive to create. My question is more about whether the code itself can disable the AV, or function outside of normal AV scanning? That would be very sophisticated & dangerous but I don't think it exists, outside of government agencies. Stuxnet had multiple zero day exploitation code but it has been reverse engineered, added to the signature databases and is no more dangerous now than a kiddie script. It is interesting how computer code is so much like biological DNA.

    • @stefanl5183
      @stefanl5183 Год назад +2

      Problem is it's not a usb drive. It's a usb keyboard or at least it's acting as one and it's automatically typing commands that download and install the malware. As far as the system knows, it's you typing those commands. One way to thwart this is NOT run your computer logged in all the time with administrative or root privilege. Then when it send the keystrokes the system won't allow the commands to execute. Problem solved right there.

    • @AlT-s2s
      @AlT-s2s Год назад

      Bruh, its a microcontroller emulating a keyboard the pc aint gonna scan a keyboard it just thinks its a regular human typing it its not a flash drive dumbass

  • @cyberbotpoc
    @cyberbotpoc Год назад

    Where can I download these script files and if the attack is possible on Digispark ATtiny85 microcontroller

    • @MrBoi96969
      @MrBoi96969 6 месяцев назад

      Yes,I have tested and it works 🎉

  • @kramselab
    @kramselab Год назад

    Do these softwares run on linux?

  • @definitelyaraven
    @definitelyaraven Год назад +4

    Time to watch this video because I feel paranoid

    • @therealb888
      @therealb888 Год назад +1

      Feel even more paranoid?😂

    • @definitelyaraven
      @definitelyaraven Год назад +1

      @@therealb888 yeah but at least now I know to check the back of my computer often

    • @richardkm5355
      @richardkm5355 Год назад +1

      😂😂😂

    • @therealb888
      @therealb888 Год назад +1

      @@definitelyaraven Lol me too. I knew of this, but a refresher is always welcome.

    • @stefanl5183
      @stefanl5183 Год назад +2

      @@definitelyaraven If somebody breaks into your house and has physical access to your computer, you got bigger problems to worry about than this.

  • @iblocstudios5563
    @iblocstudios5563 Год назад +2

    the pico is even cheaper and still very good and i think it supports most OSes

  • @pctechnician64
    @pctechnician64 Год назад

    3:20 When did they rename "Device Manager" to "Task Manager"? lol

  • @Trught
    @Trught Год назад

    USB VendorID and ProductID (VID&PID) even usb_product & usb_manufacturer can be changed at arduino boards "\arduino\hardware\arduino\avr\boards.txt"
    I can make badUSB look like any USB device, for example Logitech K270 Unifying Receiver

  • @deejayiwan7
    @deejayiwan7 Год назад

    This is old news, new bUSBs can work hundred times flaster and have encrypted memory

  • @zxwar1111
    @zxwar1111 Год назад

    I would’ve love to get sent one of those

  • @amansaiyed0
    @amansaiyed0 Год назад +2

    I am waiting for your video.. 😃😀

  • @stefanl5183
    @stefanl5183 Год назад +2

    If you don't run logged in as administrator or root by default, would that not prevent the commands from being executed? Installing software require administrative privilege does it not? There ya go! Problem solved and hack thwarted!

    • @DanielMYT
      @DanielMYT Год назад +1

      Most software can be run without administrator/root privileges. It will not be able to modify system files but could still potentially access or modify your personal data.

    • @alfonzo7822
      @alfonzo7822 Год назад

      It's easy enough to elevate to administrative rights from a non admin account if you know what you're doing.

  • @Kourosh_MD
    @Kourosh_MD Год назад

    can we check the usb on a virtual machine to see if it is safe to use it ?

    • @Sumsubcom
      @Sumsubcom  Год назад +1

      Yup

    • @rafinazmulrafi
      @rafinazmulrafi Год назад

      How?

    • @wackymoder
      @wackymoder Год назад

      @@rafinazmulrafi Here are some steps
      A) boot up a vitrtual machine.
      B) have it grab all your input
      C) it logs all keystrokes (Vbox already does this if I remember correctly)
      D) ????
      E) PROFIT

    • @stefanl5183
      @stefanl5183 Год назад +1

      Yeah, but there's an even easier way to thwart this hack. Don't be logged on with administrative or root privilege when you plug in the usb device. To download and install software should require admin privilege and if you aren't logged on with that level of privilege the commands should be rejected by the OS. Problem solved as simple as that!

  • @jboyhanny5734
    @jboyhanny5734 Год назад

    7:35 Rat= Remote administration tool

  • @bskull3232
    @bskull3232 Год назад

    Whomever trying to hack defense companies with such a hacked up solution is unbelievably stupid. If I were one of those, I would come up with a flash drive that behaves 100% like a normal flash drive and uses 100% the same circuit so no one would discover it.
    For instance, inside those flash drives is a programmable USB controller chip (i.e. it has an embedded CPU inside handling USB handshaking and flash initialization, then uses DMA to shuffle the bulk of the data), and a flash memory chip.
    If I were doing this, I would get a copy of source code of normal program running inside those chips, modify the code so once in a while it secretly attacks once, then revert back to normal operation. I will reprogram a totally normal flash drive with this spiced up code, and deliver it as a gift.
    Oh, BTW, I would also not choose my method of attack like this. A USB HID is so easy to get recognized. I would exploit buffer handling bugs in the USB driver stack (Ring 0 code is NOT DEP-protected on Windows), then carefully construct malicious USB data packets to inject machine code into the driver stack. This would be really difficult as the driver stack is really well guarded by code reviews, but I'm sure if a major government is to pull this off, they have uncovered 0-days here and there at disposal.

  • @garthkey
    @garthkey Год назад

    Just disconnect from all networks, Bluetooth included

  • @Kyler-r3n
    @Kyler-r3n 11 месяцев назад

    What can you use to live a normal life without somebody being nosey?

  • @PlayStore-rb6gk
    @PlayStore-rb6gk Год назад +2

    Do you have any really hacking course we want to join

  • @gamertronky8648
    @gamertronky8648 Год назад

    ...Or just do not put random usb into computers.

  • @skyranger696
    @skyranger696 Год назад

    Well, i would have those USB-Sticks for free!
    There are Arduino Pro Micros in there. They cost around 10 euros.
    Ill take them for free.. so i can reprogramm them to make them fit for my own Projects. I like to play around and build devices with Arduinos. they are quite useful. especially for small Circuits, which needs an Microcontroller.

  • @MissFoxification
    @MissFoxification Год назад +2

    In all honesty computers should be locked away where staff can't touch them, if there's usb ports they can reach fill them with superglue.
    It doesn't matter how many times they are told they will still plug things in and click attachments.
    I have never had a client get hacked, but I have had systems brought to their knees by stupid staff.

    • @Oliver_Atkinson
      @Oliver_Atkinson Год назад +1

      Just turn off the USB ports (idk if windows can do this, but you can disable them on linux)

    • @MissFoxification
      @MissFoxification Год назад

      @@Oliver_Atkinson Not all machines allow that for one and it can be all or none, so if you turn them all off you won't have a keyboard or mouse anymore.
      There's ways to get around disabling them, the easiest way to fix it is superglue.
      Staff never listen and always mess with things they shouldn't.

    • @nickv1008
      @nickv1008 Год назад

      I was thinking hot glue, or maybe silicone seal. Superglue the keyboard and mouse so they don't unplug them to use. Remember the good old days when people were afraid of computers...just seeing a punch card would invoke fear, and computer tech was god.

    • @MissFoxification
      @MissFoxification Год назад

      @@nickv1008 Haha, back in the day when people would ask before plugging something in? Back before plug n pray, I do not miss DIN connections.

    • @nickv1008
      @nickv1008 Год назад

      @@MissFoxification I may have some equipment with din connectors, probably lurking around an analog piano tuner (it has a spinning disk with a light behind it). I sold my u-matic video recorders a while back, I think they had din plugs.

  • @table278_bruh
    @table278_bruh Год назад

    i thought is was a USB that was bad but in reality it was very bad

  • @GameCityHQ36
    @GameCityHQ36 Год назад

    His voice is like a narrator from horror film 🥶🥶

  • @zxwar1111
    @zxwar1111 Год назад

    Use ghost Linux to reset it

  • @null-nl5su
    @null-nl5su Год назад

    Whitelists won't help, it's easy to spoof the ID

  • @iWhacko
    @iWhacko Год назад +1

    whitelists really????? bad actors would just make the device appear to have a know vendor id... who wrote this crap??///? you can contact me, 20 yrs in it, and interview me, this is the worst video ive ever seen

  • @cvspvr
    @cvspvr Год назад

    why the fuck is the usb connector so janky?

  • @MetaBloxer
    @MetaBloxer Год назад +1

    "Attack on a SHUT DOWN Computer" is clickbait, imo. it heavily implies that the attack can work while the PC is off, not waiting until it's turned on.

    • @thahrimdon
      @thahrimdon Год назад

      Technically the injected USB could send a magic packet and wake the computer over “LAN”. But still it would have to mean it’s turned on so yeah kinda

  • @wadahmohamed975
    @wadahmohamed975 Год назад

    This is a clickbait that can be forgiven

  • @birmrknowledge
    @birmrknowledge Год назад

    Brother your to genius

  • @reastle1307
    @reastle1307 Год назад

    Elliot from MR.ROBOT ?

  • @tomrockroads2123
    @tomrockroads2123 Год назад

    the military presence is here now and will express extreme prejudice🖤👹☠💀

  • @anthonywilliams7052
    @anthonywilliams7052 Год назад

    You ARE hackers if you can do these things, WHITE HAT hackers they are called.
    And hacking doesn't mean something is bad, it's just people that are good at creative uses of technology, just like electronics engineers but more often with software.

  • @PlayStore-rb6gk
    @PlayStore-rb6gk Год назад

    No one can beat you in regard of hacking thank u

  • @karakutu8304
    @karakutu8304 Год назад

    Knka turkce altyazida ekle

  • @mdminhazulabadin8717
    @mdminhazulabadin8717 Год назад +1

    ❤❤

  • @Qualitaetspruefer
    @Qualitaetspruefer Год назад

    I would be happy if someone would send me one of those overpriced arduino boards. P

  • @zar6688
    @zar6688 Год назад

    So where's the part of the "SHUT DOWN COMPUTER"? Kek. Misleading crap

  • @4bhijith.P
    @4bhijith.P Год назад

    Hehe

  • @marcusmeaney
    @marcusmeaney Год назад

    windows lol

  • @spondoolie6450
    @spondoolie6450 Год назад

    If you use a Windows machine you deserve what you get. Windows is trash.

  • @rafinazmulrafi
    @rafinazmulrafi Год назад

  • @user-wp1qo6cl8g
    @user-wp1qo6cl8g Год назад

    test

  • @A-hill-music-productions
    @A-hill-music-productions Год назад

    Ur name starts with a A

  • @A-hill-music-productions
    @A-hill-music-productions Год назад

    Plus who gives out their real info

  • @BenEehayeh
    @BenEehayeh Год назад

    Bad USB is not a device.
    Bad USB is a rootkit itw malware, PoC in 2013.
    To burry the Bad USB malware discussion, someone invented Bad USB device attacker and overly promotes it. Taking the Hak5 Rubber Duck and rebranding it as Bad USB. WTF.

    • @wackymoder
      @wackymoder Год назад

      Its branded as Bad USB because he doesn't want to direct traffic to the Hak5 Rubber Ducky