Before you start your PC, always check the USB ports.<\/p>\n
The advice comes from\u00a0Kaspersky Lab, following tests which found that publicly-available hardware and software can be used as powerful hacking tools.<\/p>\n
Kaspersky built a\u00a0Raspberry Pi-based USB device and\u00a0configured it, without using malicious software, to covertly\u00a0collect user authentication data from a simulated corporate network.<\/p>\n
The device was plugged into a PC on the network via USB and captured\u00a050 password hashes per hour.<\/p>\n
The Raspberry Pi device was\u00a0configured as an Ethernet adapter with certain configuration changes made in the OS running on the\u00a0microcomputer.<\/p>\n
Tools for packet sniffing, data collection, and processing were also installed, and\u00a0Kaspersky set up a server to collect intercepted data.<\/p>\n
“After that, the device was connected to the targeted machine and started to automatically feed the server with stolen credential data,” it said.<\/p>\n
The company found that the target PC\u00a0identified the Raspberry Pi device as a wired LAN adapter and assigned it a higher priority than other available network connections. The PC also gave it access to\u00a0data exchange on the network.<\/p>\n
“Researchers were able to collect authentication data sent by the attacked PC and its applications, as they tried to authenticate domain and remote servers. Researchers were also able to collect this data from other computers in the network segment.”<\/p>\n
Kaspersky said this method of data interception\u00a0was successfully reproduced on locked and unlocked computers running Windows and Mac OS.<\/p>\n
“However, researchers were not able to reproduce the attack on Linux-based devices.”<\/p>\n
The company advised users to always\u00a0check if there are any extra USB devices sticking out of ports on their PCs.<\/p>\n
“Avoid accepting flash drives from untrusted sources – this drive could in fact be a password interceptor,” it added.<\/p>\n
Before you start your PC, always check the USB ports, warns Kaspersky Lab.<\/p>\n","protected":false},"author":23,"featured_media":218972,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[1595,8087],"class_list":["post-218968","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-kaspersky","tag-usb"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/218968"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=218968"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/218968\/revisions"}],"predecessor-version":[{"id":218974,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/218968\/revisions\/218974"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/218972"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=218968"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=218968"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=218968"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}