New Offensive USB Cable Allows Remote Attacks over WiFi

Be careful where you buy your USB cables folks

https://www.bleepingcomputer.com/news/security/new-offensive-usb-cable-allows-remote-attacks-over-wifi/


4
LVL 49

Expert Comment

by:noci
Not exactly new....
Small Wifi USB is existing technology...
Google on "Rubber Ducky" and "PoisonTap" and the ingredients are already a bit old...
Now they are just combined in one  "device"...
0
LVL 27

Author Comment

by:Andrew Leniart
Thanks for the heads up noci. It was kind of new to me :)
0
LVL 49

Expert Comment

by:noci
Hopefully not to late to learn... ;-)

Many people considder USB to be some Serial cable like they used to have for Modems, Printers etc.
USB really is a multi-drop networking standard. And it provides for all kind of adapters like Storage Nodes, Network "routers" (=Usb Ethernet ...), Network camera's (photo equipment), ...
So USB sticks are more like a NAS on a private network then a Disk onto a Pata/Sata cable.  The difference is they have no configuration items on most USB equipment.
(Rather like the original SCSI standard, only serial).

The Poison Tap (short version) provides a network adapter, with DHCP and it will provision a network with netmask 0 (so ALL packets sent by your system [ except for the local network you PC is connected to ] go to the PoisonTap..). Which also runs a transparant proxy to hijack connections.  and will inject code back into the browser to redirect ALL access through another public site. After the PoisonTap is removed the attack still persists. Allowing an attacker to keep on tapping authentication data.
1
LVL 27

Author Comment

by:Andrew Leniart
Hopefully not to late to learn...
Never too late to learn something new noci. I live by that rule :)
0

Keep in touch with Experts Exchange

Tech news and trends delivered to your inbox every month