Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Sunday November 03 2019, @08:52PM   Printer-friendly
from the evil-week dept.

Arthur T Knackerbracket has found the following story:

There's long been much handwringing around Halloween around the prospect of pins, needles and razor blades being hidden in candy and passed out to children. On the very rare occasion this does happen, the outcome is normally little more than some superficial cuts. However, for 2019, [MG] has developed an altogether different surreptitious payload to be delivered to trick or treaters.

Consisting of a small USB device named DemonSeed, it's a HID attack gadget in the genre of the BadUSB devices we've seen previously. When plugged in, the unit emulates a USB keyboard and can be programmed to enter whatever keystrokes are necessary to take over the machine or exfiltrate data. Files are available on Github for those looking to replicate the device.

The trick here is in the delivery. [MG] has produced a large quantity of these small devices, packaging them in anti-static wrappers. The wrappers contain a note instructing children to insert them into their parent's work computers to access "game codes", and to share them with their friends while hiding them from adults.

The idea of children brazenly plugging hostile USB devices into important computers is enough to make any IT manager's head spin, though we suspect [MG] doesn't actually intend to deploy these devices in anger. It serves as a great warning about the potential danger of such an attack, however. Stay sharp, and keep your office door locked this October 31st!

-- submitted from IRC


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by All Your Lawn Are Belong To Us on Monday November 04 2019, @06:46PM

    by All Your Lawn Are Belong To Us (6553) on Monday November 04 2019, @06:46PM (#915834) Journal

    Wow. Nice sourcing. Thank you! I'm curious because I've read of things like Timothy O'Bryan, but that was a deliberate murder attempt and not a prank. And as you say, "prankings" like pins.

    And a buttload of unconfirmed urban myths NOT backed by a hospital ER report or police reports that actually narrowed a culprit. And, pins or razors, it is an assault that cops would actually work at finding the perpetrators of.

    Or try this: Snopes [snopes.com] from 2017 (despite the URL saying 2015).

    Point is.... LOTS of singular incidents reported by news media (may or may not be true). NO, ABSOLUTELY NO, "6 kids trick or treating found in their bags in ." "A dozen kids from six families went to the emergency room in the last 24 hours at the ER in ________________ because _candy". "Five kids showed up to ER ____, 2 to ER _____, and 6 to prompt care, and 13 police reports from _______________________." THAT's a problem to be worried about.

    But no, at the very most you get "hey, person on person...." And I'm sorry - hospital report or certified by reporter that a police report was filed, or it's just attempt to incite moral panic.

    --
    This sig for rent.
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2