BadUSB

Definition

BadUSB is a cyberattack that executes malicious code with a compromised USB device. The attacker alters the firmware of a USB device (e.g., a USB flash drive or keyboard) to automatically execute specific codes once the victim inserts it into their computers.

Jakob Lell and Karsten Nohl revealed this attack at the Black Hat USA 2014 security conference.

Stopping BadUSB Attacks

• Implement USB device security tools: Tools like USBCop, USBGuard, and USBKill can detect and prevent BadUSB attacks.
• Stick to trusted vendors and brands: USB devices from untrustworthy websites or unknown manufacturers may be pre-installed with malicious software.
• Use only trusted USB devices: Criminals might intentionally misplace compromised USB devices, hoping a curious user will use them. So, avoid USB devices from unknown sources.
• Update regularly: Usually, BadUSB attacks exploit software vulnerabilities. Therefore, you should always keep your operating system and software up-to-date to prevent these attacks.
• Disable USB ports: You can disable unused ports if you are worried about unauthorized access.
• Use a USB allowlist: Set your computer to only allow connections from specific USB devices to limit the number of devices that can initiate a BadUSB attack.