As more devices utilize USB connections in its various forms (A, B, C etc.), it has become the most common connection type for currently available technology. As with any standard, bad actors can unfortunately exploit this common feature to compromise your devices.
USB Drive “Trojan Horses”: Bad actors can create a series of USB flash drives, similar to the ones many people use on a daily basis, to try and steal information. These flash drives will contain a malicious file with an enticing name, such as “Executive Salaries." The bad actors will then scatter the drives in public places for people to find. When someone picks a drive up and plugs it into their computer, the files do their work and the host system can easily be compromised. Therefore, always be suspicious of USB flash drives that you find out in the wild. They could have been planted deliberately for someone to find. If you must check a drive that you find, only load it on a non-networked computer that does not contain sensitive information. Also, do not execute any files on these drives unless absolutely necessary. The best course of action is to format or discard the drive.
Public USB Ports: USB ports are available in many public locations for the convenience of charging USB devices such as phones, headphones, or computers. It's best to avoid public-use USB ports altogether, but if necessary, examine the port carefully. Bad actors can place small "extender" devices on these ports that still allow you to connect, but it will try to install malicious software on your device. Once installed, this software is often very difficult to detect.
Encrypted Flash Drives: ITS strongly recommends that everyone use encrypted USB flash drives when it's necessary to store data on such drives. These drives utilize internal software or a physical keypad to protect your data from anyone who does not have the password/code. No one should store sensitive data on an unencrypted USB flash drive. Please contact the IT service desk if you have questions or need a quote for an encrypted USB flash drive.