News for hackers. Stuff that matters.

A comment on Unpatchable Malware That Infects USBs. Parent comment

Re:Unpatchable Malware That Infects USBs by Terr_ on Thursday October 02, 2014 @01:23PM (#8401829)
Would it be possible to:

1. Connect innocently as a plain storage device 2. Wait a period of time or even monitor voltage fluctuations to guess when the user is not at the computer. 3. Disconnect and reconnect (or a new side-connection?) as a HID device

Users often won't mentally associate the long-delayed attack with the USB stick, and if it attacks when they are AFK the timer might hit 0 in total secrecy.

[ Parent | on HN ]
Re:Unpatchable Malware That Infects USBs by jedunnigan on Thursday October 02, 2014 @02:04PM (#8402111)
Absolutely true. The time lapse is only to allow the user to inspect the drive before it is allowed to execute arbitrarily. That may not actually be possible now that I think about it, so the idea is bunked anyway.
[ Parent | on HN ]