The Unpatchable Malware That Infects USBs Is Now on the Loose (Wired)

The BadUSB attack was demonstrated at the Black Hat security conference, but the code was not released at that time. Wired reports that two security researchers have released some code. "In a talk at the Derbycon hacker conference in Louisville, Kentucky last week, researchers Adam Caudill and Brandon Wilson showed that they’ve reverse engineered the same USB firmware as [Karsten] Nohl’s SR Labs, reproducing some of Nohl’s BadUSB tricks. And unlike Nohl, the hacker pair has also published the code for those attacks on Github, raising the stakes for USB makers to either fix the problem or leave hundreds of millions of users vulnerable." LWN covered BadUSB last August. (Thanks to Paul Wise)

Comments (67 posted)