Why USB Drives Are Still Dangerous
In a famous 2016 study, researchers scattered nearly 300 USB drives across a university campus. Almost half were plugged into a computer by whoever found them. Worse, many of those people then opened the files inside. Twenty-six years after Stuxnet was reportedly carried into Natanz on a USB drive, the technique still works.
The Threats
A malicious USB drive can:
- Auto-run malware on insertion (less common today but still possible on older systems with autorun enabled).
- Pose as a keyboard (a "BadUSB" or "Rubber Ducky" attack) and type commands into your computer at thousands of words per minute.
- Deliver innocent-looking files that contain malware payloads, waiting for the user to open them.
- Cause physical damage (a "USB Killer" delivers a high-voltage surge that destroys the host port and motherboard).
Step 1 — Don't Plug It In Casually
If you find a USB drive in a parking lot, on a desk, on a train — do not plug it into your work or personal machine to "see who it belongs to". This is exactly the social-engineering setup the bad guys count on.
Step 2 — Disable AutoRun
On Windows: Settings → Bluetooth & devices → AutoPlay → Off (or set every action to "Take no action").
On macOS and Linux, auto-execution is generally disabled by default, but mounted contents may still be indexed and previewed — which can trigger thumbnail-generator vulnerabilities. Be cautious.
Step 3 — Use a Disposable or Isolated Machine
If you really need to inspect an untrusted drive:
- Plug it into a dedicated air-gapped laptop with no important data on it, or
- Boot a live Linux USB (Ubuntu, Tails) on a spare machine so the host OS is read-only.
Never inspect an unknown drive on your main work machine.
Step 4 — Scan the Contents Before Opening
- Mount the drive read-only if possible (most OSes have this option).
- Copy individual files (do not run them) to your sandbox machine.
- Upload each suspicious file to an antivirus scanner like Virus Purge.
- Only after a clean verdict, consider opening any file — and even then, follow the email-attachment guide.
Step 5 — When You're Done
- Format the drive before re-using it.
- If the drive came from an unknown source, do not reuse it at all. Physically destroy it.
Quick Rules
- Never plug in a USB drive you found.
- Never plug in a USB drive given to you "as a free gift" at a conference without scanning it first.
- Never assume a USB drive from a colleague is safe — their machine could be infected.
- Always treat unknown drives as potentially hostile until proven otherwise.
A €10 USB drive is not worth your data, your identity, or your company's network.