You are here: Home / Best of the Best: Tech Blog Roundup
Neustar, Inc.
Protect your website & network using real-time information & analysis
Home > Tech Blogs  Flag for objectionable content? Flag for Objectionable Content?
Average Rating:
Rate this article:  
Ars Technica: This thumbdrive hacks computers. “BadUSB” exploit makes devices turn “evil”
2014-07-31 6:31am -07:00T Visit Ars Technica


When creators of the state-sponsored Stuxnet worm used a USB stick to infect air-gapped computers inside Iran's heavily fortified Natanz nuclear facility, trust in the ubiquitous storage medium suffered a devastating blow. Now, white-hat hackers have devised a feat even more seminal—an exploit that transforms keyboards, Web cams, and other types of USB-connected devices into highly programmable attack platforms that can't be detected by today's defenses.

Dubbed BadUSB, the hack reprograms embedded firmware to give USB devices new, covert capabilities. In a demonstration scheduled at next week's Black Hat security conference in Las Vegas, a USB drive, for instance, will take on the ability to act as a keyboard that surreptitiously types malicious commands into attached computers. A different drive will similarly be reprogrammed to act as a network card that causes connected computers to connect to malicious sites impersonating Google, Facebook or other trusted destinations. The presenters will demonstrate similar hacks that work against Android phones when attached to targeted computers. They say their technique will work on Web cams, keyboards, and most other types of USB-enabled devices.

"Please don't do anything evil"


Read More on Ars Technica...

  © Copyright 2014 Ars Technica. All rights reserved. If you've enjoyed this content, please visit Ars Technica to show your appreciation.

Information for Bloggers

Latest Blog Entries from Ars Technica:
Lone Star Le Mans: Ars goes racing in Texas
Home Depot ignored security warnings for years, employees say
Oculus announces new virtual reality headset prototype, Crescent Bay
There’s not a creativity deficit in science
Swedish voter uses JavaScript code as write-in candidate
Latest Tech Blogs from around the Blogosphere:
Content Digitization QA: Recording from the webinar on “No One Left Behind – Let’s Embrace Accessibility Testing”
Technology Tribe: Features Subscriptioned into Services Are Bad For You
Fun Stuff Online: On Hoopla, Jill Scott, The Real Thing: Words And Sounds Vol. 3
Jeremia Grossman: TEDxMaui -- Hack Yourself First
Jeremia Grossman: Written Speech: TEDxMaui -- Hack Yourself First