usb-rubber-ducky

You can get a 'USB rubber ducky' [1] which emulates both a USB memory stick and a USB keyboard, allowing you to script keystrokes for the keyboard [2] So it can do anything a newly plugged in keyboard can do. Which, if the user is already logged in, makes grabbing the user's files easy. [1] https://shop.hak5.org/collections/usb-rubber-ducky/products/... [2] https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads

Hasn't this been known for half-a-decade? I mean, it's a product you can literally buy and it's impossible to adequately defend against. https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads https://shop.hak5.org/products/usb-rubber-ducky-deluxe

> This will not give you malware unless you actually run something from the USB, AFAIK. https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads > That’s an interesting definition of “bleeding edge tech”. Usually I treat Linux a place where operating system experiments are tested first. I don't know about bleeding edge but even simple things like mic, camera are a hassled to get working - a friend has been using his phone for hangouts meetings for the last month because the mic or the camera would not work on his zenbook running Ubuntu. Don't get me started on audio on linux :(. >> As far as using, now softwrae on Microsoft Windows is as good as Mac. > Disagree strongly, but that is my opinion. Depends what software you want to use.

If you're interested in what you can do with this (without being there to observe the screen), here is a list of payloads written by others: https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payloads

This kind of attack has been around for some time, but so far you needed a special, programmable chip for that. And yes, it can attack nearly every OS, including Linux. Check out this for more information: https://github.com/hak5darren/USB-Rubber-Ducky/wiki