4

This question already has an answer here:

Recently I've watched a movie "Blackhat" where just by inserting a USB flashdrive he could infect a host PC with some malicious program. Is it true that it's not safe to share USB flashdrives just like that? If yes, how come a "virus" can initiate itself in a host machine without being executed by a user? In other words, doesn't it need to be clicked on first?

marked as duplicate by Ohnana, Neil Smithline, Xander, schroeder Jan 23 '16 at 1:14

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

6

Using something like BadUSB can turn any USB device into a keyboard, RubberDucky makes this even easier.

Using these techniques you can run commands and install mallware on a computer without the user ever pressing a button or opening a file. So yes, using a untrusted USB (storage) device can be dangerous.

2

Sharing a USB is always a risk. We never know what new ransomware or malware that pendrive contains. Its always advised to scan the USB before opening the files in your system.

Also how would you know by seeing if a file is corrupted,malware etc?

Ever came across autorun malware in windows? You dont need to click on the file for it to run

0

Yes, in short, a USB drive can be used in this way. I always scan any USB that is put in my computer, regardless of who it is from.

  • 4
    If you scan it after you've put it in the computer, it may be too late. – ugoren Jan 22 '16 at 16:09
  • Not necessarily. Usb Disk scanner for example scans the disk before opening it. – Krishna Chaitanya Mar 8 '16 at 7:57

Not the answer you're looking for? Browse other questions tagged or ask your own question.