<story><title>Malware that uses USB drives to covertly jump airgaps</title><url>http://arstechnica.com/security/2016/08/meet-usbee-the-malware-that-uses-usb-drives-to-covertly-jump-airgaps/</url></story><parent_chain><item><author>kalleboo</author><text>&amp;gt;  Is it even possible to have a useful workstation these days without any USB devices&lt;p&gt;All my gear is on the network these days. The only USB device I regularly plug is in a dumb 5V fan from the dollar store... I imagine these days it&amp;#x27;s more possible than ever.&lt;p&gt;Air-gapped computers (which is what this seems to be targeting) on the other hand are surely going to do all their data transfer over USB.</text></item><item><author>colinbartlett</author><text>&amp;gt; As Ars has noted in previous coverage, the techniques are theoretically effective, but their utility in real-world situations is limited. That&amp;#x27;s because the computers they target still must be infected by malware. If the computers aren&amp;#x27;t connected to the Internet, the compromise is likely to be extremely difficult and would most likely require the help of a malicious insider, who very well may have easier ways to obtain data stored on the machine.&lt;p&gt;Nonetheless, an interesting technique. Is it even possible to have a useful workstation these days without &lt;i&gt;any&lt;/i&gt; USB devices?</text></item></parent_chain><comment><author>huehehue</author><text>Are you sure the USB fan isn&amp;#x27;t carrying a malicious payload? ;)</text></comment>
<story><title>Malware that uses USB drives to covertly jump airgaps</title><url>http://arstechnica.com/security/2016/08/meet-usbee-the-malware-that-uses-usb-drives-to-covertly-jump-airgaps/</url></story><parent_chain><item><author>kalleboo</author><text>&amp;gt;  Is it even possible to have a useful workstation these days without any USB devices&lt;p&gt;All my gear is on the network these days. The only USB device I regularly plug is in a dumb 5V fan from the dollar store... I imagine these days it&amp;#x27;s more possible than ever.&lt;p&gt;Air-gapped computers (which is what this seems to be targeting) on the other hand are surely going to do all their data transfer over USB.</text></item><item><author>colinbartlett</author><text>&amp;gt; As Ars has noted in previous coverage, the techniques are theoretically effective, but their utility in real-world situations is limited. That&amp;#x27;s because the computers they target still must be infected by malware. If the computers aren&amp;#x27;t connected to the Internet, the compromise is likely to be extremely difficult and would most likely require the help of a malicious insider, who very well may have easier ways to obtain data stored on the machine.&lt;p&gt;Nonetheless, an interesting technique. Is it even possible to have a useful workstation these days without &lt;i&gt;any&lt;/i&gt; USB devices?</text></item></parent_chain><comment><author>marcosdumay</author><text>&amp;gt; Air-gapped computers (which is what this seems to be targeting) on the other hand are surely going to do all their data transfer over USB.&lt;p&gt;Why? DVDs still exist.</text></comment>