Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 534
  • Last Modified:

AV Detect BadUSB?

So I reading various tech articles about the USB flaw known as BadUSB (malware embedded in firmware) and that the code was recently posted on GitHub.  As a result, there's hysteria and suggestions not to use USB connected devices.  That's not very practical and I wanted to know if AV apps would detect such malware?
0
markbyrn
Asked:
markbyrn
1 Solution
 
McKnifeCommented:
If a device tells windows "I am a keyboard", then windows installs it and that device is ready for action. So if that fake keyboard starts typing in a command shell, windows cannot distinguish if this is the user or not, nor can the AV software. So the code typed there will be executed.

There are 2 measures to be taken:
-lock your screen when absent
-use software that only lets whitelisted USB devices work on your machine.

The latter can be done by GPOs. It can also be done with external softwares, amongst them AV software.
But it will be a real pain to administer, so the best solution stays "lock your screen!".
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now