{"id":21561,"date":"2023-03-25T16:10:26","date_gmt":"2023-03-26T00:10:26","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2023\/03\/25\/news-15292\/"},"modified":"2023-03-25T16:10:26","modified_gmt":"2023-03-26T00:10:26","slug":"news-15292","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2023\/03\/25\/news-15292\/","title":{"rendered":"USB bombs sent to news organizations"},"content":{"rendered":"<p>We&#8217;ve warned about the possible dangers arising from plugging in unknown USB sticks before, but the dangers we&#8217;re concerned with are normally confined to your data.<\/p>\n<p>However, this week we learned a far more serious threat. No fewer than five different news agencies in Ecuador were <a href=\"https:\/\/www.bbc.co.uk\/news\/world-latin-america-65026522\" target=\"_blank\">sent parcels containing a USB stick<\/a>. In the one instance where a stick was plugged into a PC by a journalist, the device exploded, injuring a presenter in the news room. At least one of the devices had been loaded with a &#8220;<a href=\"https:\/\/www.cbsnews.com\/news\/news-stations-letter-bombs-ecuador-one-explodes-clear-message-to-silence-journalists\/\" target=\"_blank\">military type explosive<\/a>&#8220;.<\/p>\n<p>Law enforcement is currently investigating, but for now we have to hope that no additional devices were sent out, just waiting to be inserted into a PC. While this scenario is almost guaranteed to be one that you will not face, that doesn&#8217;t mean there aren&#8217;t USB stick related perils&nbsp;out there in the wild.<\/p>\n<h2>A sticky malware threat<\/h2>\n<p>Malware authors are big fans of sending out infected USB sticks to potential victims. Just last year, slick looking Microsoft boxes supposedly containing Office 365 loaded onto USB sticks were&nbsp;s<a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2022\/08\/tech-support-scammers-target-microsoft-users-with-fake-office-365-usb-sticks\">ent out by tech support scammers<\/a>. When inserted into a PC, a phone number would appear and callers would find themselves asked to install remote access tools on their devices. Elsewhere, infected USB Sticks came <a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2022\/01\/attackers-are-mailing-usb-sticks-to-drop-ransomware-on-victims-computers\">bearing the gift of ransomware<\/a>.<\/p>\n<p>USB sticks are also easy to lose: Sometimes people find them lying around in the street, full of <a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2022\/06\/city-worker-loses-usb-stick-containing-data-on-every-resident-after-day-of-drinking\">potentially sensitive data<\/a>, as opposed some kind of horrible malware.<\/p>\n<p>Our willingness to insert sticks into computers is helped along by USB sticks being a commonplace giveaway at events, conferences, and even a staple of certain <a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2015\/02\/get-the-drop-on-dead-drops\">performance art pieces<\/a>. If you have children, your school may well hand out digital copies of school photographs on USB sticks. Many people will insert those sticks into their computer without a second thought because they&#8217;re from a trusted source, the school. Even so, the stick is actually from a totally unrelated third party photographer. Can we guarantee that the photographer is following safety rules, if they even exist?<\/p>\n<p>We never really know for sure, and that can be a problem. However, there are a few things you can do to help keep yourself safe from USB harm.<\/p>\n<h2>Tips for USB security<\/h2>\n<ul>\n<li><strong>Don&#8217;t autorun files<\/strong>. If Autorun is enabled on your device, it&#8217;s time to consider turning it off.<\/li>\n<li><strong>Restrict access<\/strong>. If people in your workplace don&#8217;t need to use USB sticks, turn off USB access on their devices and block the USB ports.<\/li>\n<li><strong>Occasional access<\/strong>. For times when someone needs to use a USB stick, consider using those sticks on a non-networked PC running a virtual machine.<\/li>\n<li><strong>Fire up those security tools<\/strong>. Always <a href=\"https:\/\/www.malwarebytes.com\/premium\">scan the contents of a USB stick<\/a>. Your Endpoint Detection and Response should be equipped to deal with USB threats.<\/li>\n<\/ul>\n<hr \/>\n<p dir=\"ltr\">Malwarebytes removes all remnants of ransomware and&nbsp;prevents&nbsp;you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.<\/p>\n<p style=\"text-align: center;\"><span class=\"blue-cta-bttn\" style=\"background-color: #0d3ecc; line-height: 50px; padding: 0 20px;\"><a href=\"https:\/\/www.malwarebytes.com\/business\/contact-us\/\">TRY NOW<\/a><\/span><\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2023\/03\/5-news-stations-receive-explosive-usb-stick-letter-bombs\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<table cellpadding=\"10\">\n<tr>\n<td valign=\"top\" align=\"left\">\n<p>Categories: <a href=\"https:\/\/www.malwarebytes.com\/blog\/category\/news\" rel=\"category tag\">News<\/a><\/p>\n<p>Tags: usb<\/p>\n<p>Tags:  bomb<\/p>\n<p>Tags:  mail<\/p>\n<p>Tags:  post<\/p>\n<p>Tags:  letter<\/p>\n<p>USB sticks repurposed as explosive devices provide a dramatic reminder of how little you know about unknown USB devices.<\/p>\n<table width=\"100%\">\n<tr>\n<td align=\"right\">\n<p><b>(<a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2023\/03\/5-news-stations-receive-explosive-usb-stick-letter-bombs\" title=\"USB bombs sent to news organizations\">Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2023\/03\/5-news-stations-receive-explosive-usb-stick-letter-bombs\">USB bombs sent to news organizations<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/www.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[1745,28936,16802,32,15689,19448],"class_list":["post-21561","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-bomb","tag-letter","tag-mail","tag-news","tag-post","tag-usb"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/21561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=21561"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/21561\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=21561"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=21561"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=21561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}