Also works by emulating a keyboard/mouse and can send keystrokes/mouse cursor movements to the host according to a preloaded script.ĥ) Unintended USB channel - a proof of concept (POC) USB hardware trojan that exfiltrates data based on unintended USB channels (such as using USB speakers to exfiltrate data).Ħ) TURNIPSCHOOL (COTTONMOUTH-1) - a hardware implant concealed within a USB cable. Once connected to a host computer, the Rubber Ducky poses as a keyboard and injects a preloaded keystroke sequence.Ģ) PHUKD/URFUKED attack platforms - similar to Rubber Ducky, but allows an attacker to select the time when it injects the malicious keystrokes.ģ) USBdriveby - provides quick covert installation of backdoors and overriding DNS settings on an unlocked OS X host via USB in a matter of seconds by emulating an USB keyboard and mouse.Ĥ) Evilduino - similar to PHUKD/URFUKED, but uses Arduino microcontrollers instead of Teensy. Reprogrammable microcontroller USB attacksġ) Rubber Ducky - a commercial keystroke injection attack platform released in 2010.
The device looks like a particular USB device (e.g.: charger), but carries out the operations of another (e.g.: keyboard -injects keystrokes).ī1) By reprogramming the USB device's firmware to execute malicious actions (such as malware downloading, data exfiltration, etc.).ī2) By not reprogramming USB device firmware, but leveraging flaws in how operating systems normally interact with USB protocols/standards. A) By reprogramming the USB device's internal microcontroller.
0 kommentar(er)
