Does Dropping USB Drives in Parking Lots and Other Places Really Work?
summary
A controlled experiment drops 297 USB sticks across a university campus and finds 98% picked up and about 48% of those clicked files (uploader’s numbers); the team also builds weaponized HID devices that use Metasploit reverse shells with a tiny (≈100‑character) payload, OS fingerprinting via lock‑key toggles, and silicone‑molded fake shells. Results show attacks are fast (20% opened in an hour, 50% under five hours) and practical; defenses remain limited to policy and user training.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:53USB attack overview
- 2:43Types of USB attacks
- 5:46The USB drop study
- 10:40Study results
- 11:58Victim behavior analysis
- 15:25Advanced attack demonstration
- 17:12Weaponizing HIDs
- 23:16Creating realistic USBs
- 29:40Defense and conclusion
related talks
51mA Measured Response to a Grain of Rice
08mHubBub: Contention-Based Side-Channel Attacks on USB Hubs
26mUSB Snooping Made Easy: Crosstalk Leakage Attacks on USB Hubs
47mTrojanizing Hardware: Be Careful What (USB) You Plug In and Where
48mHacking Exposed: Next-Generation Tactics, Techniques, and Procedures
45mBadUSB - On Accessories that Turn Evil
33mHacked on National Television
27mCracking With Automated USB Fuzz