|
|
Post by Auf Kiltre on Feb 26, 2024 13:32:50 GMT -5
I have an annual subscription to Malwarebytes and it generates almost daily articles about malware intrusion, scams, etc. I won't link today's email but it discusses the Malware download identified on the USB charging of a device made to send women to their happy place. Plug in to recharge and it automatically downloads and opens malware.
This got me wondering about all such rechargeable devices that use USB. Flashlights, Guitar Tuners, Vape pens....the potential seems endless. Who knows, does the tech even exist where wall charging these devices is secure? Access to wifi, wireless, etc.
I often fantasize about a shack somewhere in the Ozarks with nothing but a woodburning stove, hand pump well, fishing rod and long rifle.
|
|
|
|
Post by Leftee on Feb 26, 2024 14:10:29 GMT -5
So… what exactly does it do to said device?
Asking for a friend.
|
|
|
|
Post by Auf Kiltre on Feb 26, 2024 14:40:14 GMT -5
So… what exactly does it do to said device? Asking for a friend. Without any malware protection it auto installs "an information stealer known as Lumma. Lumma is available through a Malware-as-a-Service (MaaS) model, where cybercriminals pay other cybercriminals for access to malicious software and its related infrastructure. Lumma steals information from cryptocurrency wallets and browser extensions, as well as two-factor authentication details. Lumma is often distributed via email campaigns, but nothing stops the cybercriminals from spreading it through infected USB drives, as is the case here." And to be clear, the device hosts the malware and infects the computer it plugs into. As my brother said, if they're plugging it into their computer they're using it wrong 😂 |
|
|
|
Post by slacker 🐨 on Feb 26, 2024 15:36:08 GMT -5
Hmmmm....never would have occurred to me to plug a "dumb" device into my computer to charge it. I have a power block that has 6 USB ports that I use to charge things like the collar-mounted light we put on our dog's collar so we can see her at night. I'm not sure why someone would plug something like that into their computer.
|
|
|
|
Post by Auf Kiltre on Feb 26, 2024 15:42:30 GMT -5
I would imagine quick access to an available USB port would be a laptop, etc. I've done it with a rechargeable flashlight and my Peterson clip on tuner.
|
|
|
|
Post by tahitijack on Feb 26, 2024 17:09:12 GMT -5
I read a story last summer advising NOT to use USB chargers at airports as that was a prime target for hackers working the dark web universe to steal your data, identity, contacts ,passwords and essentially your life.
|
|
|
|
Post by gato on Feb 26, 2024 17:38:19 GMT -5
I never recharge anything by plugging into my computer. My kitchen counter is a viper's nest of charging cords plugged into wall sockets.
|
|
|
|
Post by slacker 🐨 on Feb 27, 2024 9:40:36 GMT -5
I never recharge anything by plugging into my computer. My kitchen counter is a viper's nest of charging cords plugged into wall sockets. Buy one of those multi-port charging blocks...uses one outlet and you can have a bunch of USB charging ports. Then buy some short USB cables and you can really clean things up. You could even make a mini shelf box to hold everything with the charging cables coming in from the rear. |
|
|
|
Post by Auf Kiltre on Feb 27, 2024 10:04:23 GMT -5
I think every electronic device, especially those utilizing blue tooth and wifi, can be exploited by the scammers. Hell, I wouldn't doubt that we're not far off having our electrical service offer some vulnerability for an intrusion and create a conduit to other devices.
Now where's that roll of Reynolds Wrap? 😁
|
|
|
|
Post by LTB on Feb 27, 2024 10:43:53 GMT -5
My Mesa Boogie TT-800 has a USB charging connection for “charging cell phones etc”. I do not use it mainly because it is not on long enough to fully charge the phone but now I really have a reason not to.
|
|
|
|
Post by reverendrob on Feb 27, 2024 19:53:12 GMT -5
It's been a thing for ages, it's why secure facilities do not have...USB ports accessible.
|
|
|
|
Post by markfromhawaii on Feb 27, 2024 22:18:01 GMT -5
Maybe it’s just a matter of time before these dark techno folks figure out how to use power line carrier to go from device through USB charger through the IEC cable on your laptop.
|
|
|
|
Post by reverendrob on Feb 27, 2024 22:32:09 GMT -5
Maybe it’s just a matter of time before these dark techno folks figure out how to use power line carrier to go from device through USB charger through the IEC cable on your laptop. They'll load on the chargers themselves first, easier. |
|
|
|
Post by LTB on Feb 29, 2024 11:56:16 GMT -5
The dealership I bought my latest vehicle at has all their USB ports disabled. I am sure there is a way for their IT section to access them as needed. I found this out when I asked them to give me a copy of the sale using a USB Memory Stick and he couldn’t do it.
|
|
009
Wholenote
Take me to your leader!
Posts: 519
|
Post by 009 on Feb 29, 2024 14:27:23 GMT -5
You’d think (well, I thought) that a dedicated charging cable would be available — constructed with power wires only or with the data contacts/connectors disabled. I could not find any for sale.
|
|
Dave
Halfnote
Posts: 56
Formerly Known As: Belgarath
|
Post by Dave on Feb 29, 2024 21:14:30 GMT -5
An old hacker trick is to load malware onto a USB flash drive and leave it on an employee parking lot or in a hallway, breakroom, restroom, etc., or if they are really good, just slip it into a desk drawer and wait for someone to plug it into a PC on the company network to see what's on it. Bam! Malware deployed inside the network.
|
|
