> In one test of how well a USB scam can work, Trustwave planted five USB drives decorated with the targeted company’s logos in the vicinity of the organization’s building. Two of the five “lost & found” drives were opened at the organization. One of the openings even enabled the researchers to glimpse software employed to control the organization’s physical security. https://www.redteamsecure.com/blog/usb-drop-attacks-the-dang...

They are used to great effect in pentesting. I think it's natural to see a drive and think "Oh no, I need to get this back to a coworker."

I have a friend who does pentesting and she collects many cool and interesting looking usb flash drives for this very purpose. She says "60% of the time, it works every time."