Gift card scam sends out malicious USB drives

Malware attacks using USB flash drives dropped in offices or public locations like car parks are not uncommon. But researchers at Trustwave Spiderlabs have been investigating a new attack disguised as a gift card. The attack came in the form of a letter that appears to be from retail chain Best Buy offering a $50 gift to loyal customers. With the letter comes a USB drive supposedly containing a list of items to spend the money on. This is where it gets sneaky, the USB device actually contains an Arduino microcontroller programmed to emulate a USB keyboard. Since PCs generally… [Continue Reading]