News for hackers. Stuff that matters.

A comment on usbredir: A protocol for sending USB device traffic over a network connection. Parent comment

Re:usbredir: A protocol for sending USB device traffic over ... by Terr_ on Tuesday April 16, 2024 @05:32PM (#40057470)
Imagine someone driving around neighborhoods with a laptop and a very good antenna.

1. Detect vulnerable networks in computers

2. Pretend to be a USB keyboard.

3. Trigger blind key combos that will visit a website, confirm downloading a file, execute that file, and "OK" privilege escalation prompts.

4. Move on to the next block or cul-de-sac, while the malware finishes unpacking and reporting home for further use.

[ Parent | on HN ]
Re:usbredir: A protocol for sending USB device traffic over ... by eichin on Tuesday April 16, 2024 @06:05PM (#40057814)
That doesn't need wireless USB, we already have CVE-2023-45866 https://news.ycombinator.com/item?id=38661182 for "bluetooth stack more than 6 months old"
[ Parent | on HN ]
Re:usbredir: A protocol for sending USB device traffic over ... by draugadrotten on Wednesday April 17, 2024 @04:40AM (#40061975)
Yeah, that has been a thing since the last millenium. https://en.wikipedia.org/wiki/Wardriving
[ Parent | on HN ]