Wednesday, November 21, 2018
News Roundup

Experts warn against plugging in USB devices without knowing where they come from

When journalists arrived in Singapore for the historic summit between President Donald Trump and North Korean leader Kim Jong Un last month, security experts were alarmed by what awaited those who were covering the event. Inside a welcome bag that included bottled water featuring the faces of Trump and Kim and a guide to the local area was something far more suspicious: a miniature fan that connects to a computerís USB port.

The discovery prompted a security researcher to disassemble the fan to inspect the USB. Security experts say that people should never use USB devices without knowing where they come from. Hackers and spies can use them as Trojan horses - devices that seem innocuous but are loaded with malware designed to take control of a targetís computer and steal information. The summit had attracted journalists from all over the world. Since reporters are often in contact with business and government officials and gather nonpublic information, their personal devices and newsroom networks could be enticing targets.

Experts say USBs are a common way for hackers to gather information or infect devices. In 2008, Russian agents planted virus-carrying USB sticks in retail kiosks around NATO headquarters in Kabul, Afghanistan, to gain access to a classified Pentagon network, according to the New Yorker. In 2013, Italian newspapers alleged that Russian operatives used USB devices to try to spy on world leaders at a G20 summit in St. Petersburg.

Research suggests that average citizens can also become targets. In 2011, the Department of Homeland Security planted USBs and CDs in government parking lots to test the security practices (and susceptibility) of employees and contractors. Sixty percent of people who picked up the items plugged them into work computers, and if the disks or USBs had an official logo printed on them the rate shot up to 90 percent. In another experiment conducted at the University of Illinois Urbana-Champaign in 2016, researchers dropped nearly 300 USB sticks on campus and found that nearly half the time someone would pick them up and plug them into their computer.

Sergei Skorobogatov, a hardware secruity researcher at the University of Cambridge, tested one of the fans from the summit. In an analysis of the components, Skorobogatov said he found no malicious software functionality inside the fan. But he was quick to add that people shouldnít let their guard down when it comes to swag. "However, this does not eliminate the possibility of malicious or Trojan components wired to USB connector in other fans, lamps and other end-user USB devices," he wrote in the analysis published on his staff website and first reported by ZDNet.

In other words, itís not a good idea to plug unknown devices into the USB ports of your own devices, Skorobogatov said in an interview with The Washington Post. He added that, as in the case of the fans, just because one USB device in a given group is safe, doesnít mean the rest of them are.

Jake Williams, founder of the cybersecurity firm Rendition Infosec and a former member of the National Security Agencyís hacking group, was also circumspect about the USB fans. He said that malicious actors could have narrowly targeted one reporter who was of special interest out of 100, meaning that most fans may have appeared harmless even as some might have been used to target specific journalists. The extremely small sample size of one fan makes it hard to draw conclusions, he said. But on the general practice of using hardware given to you by strangers or found in public places, he was direct, "Itís horrendously bad."

Comments
Three playoff quarterbacks who check many boxes

Three playoff quarterbacks who check many boxes

They may not play under center at the next level, but Joshua Youngblood, Charles Montgomery and Fabian Burnett keep their high school teams thriving.
Updated: 1 hour ago
Oh, how we love Tampa International Airport

Oh, how we love Tampa International Airport

TIA didn't rank in a recent survey of best airports. Its fans came out swinging.
Updated: 2 hours ago
Hillsborough’s holiday happenings give folks plenty to do this season

Hillsborough’s holiday happenings give folks plenty to do this season

Plant City’s Christmas Lane, Dover’s Wonderland of Lights and Tampa’s Winter Village offer family-friendly holiday activities.
Updated: 2 hours ago
Amy Scherzer’s Diary: Weekly Wrap-Up of the Tampa Social Scene

Amy Scherzer’s Diary: Weekly Wrap-Up of the Tampa Social Scene

MTC’s Table in the Park, lip syncing for the American Lung Association and AFP’s National Philanthropy Day highlight the latest slate of Tampa’s big events.
Updated: 2 hours ago
Bucs teammate Mike Evans kept center Ryan Jensen from his first NFL touchdown

Bucs teammate Mike Evans kept center Ryan Jensen from his first NFL touchdown

When Jameis Winston fumbled into the end zone, Mike Evans and Ryan Jensen pounced on the ball, and Evans came away with it.
Updated: 2 hours ago
Sports Day Tampa Bay podcast: Matt Baker on Florida-Florida State, USF-UCF and more

Sports Day Tampa Bay podcast: Matt Baker on Florida-Florida State, USF-UCF and more

Times college football beat reporter Matt Baker joins Rick Stroud on today's episode to break down Rivalry Week.
Updated: 2 hours ago
Forecast: Get ready for a dry, pleasant Thanksgiving eve across Tampa Bay

Forecast: Get ready for a dry, pleasant Thanksgiving eve across Tampa Bay

A cold front that passed through the area Tuesday has set the Tampa Bay area up for a dry, pleasant Thanksgiving eve and near perfect weather for the holiday, according to forecasters.
Updated: 2 hours ago
Joe Henderson: Johnston's ongoing recovery a reason to give thanks

Joe Henderson: Johnston's ongoing recovery a reason to give thanks

After suffering a serious spinal injury over the summer, Joey Johnston is back home after receiving several months of physical therapy at Atlanta's Shepherd Center.
Updated: 2 hours ago
College football Week 13 viewing guide: UF-FSU, War on I-4 and the Egg Bowl

College football Week 13 viewing guide: UF-FSU, War on I-4 and the Egg Bowl

A sneaky good game this weekend? Troy-Appalachian State, which has a pair of rising coaches.
Updated: 3 hours ago
The Daystarter: Glenn Beck reflects on Tampa; meat-free options for Thanksgiving; a caution for online shoppers

The Daystarter: Glenn Beck reflects on Tampa; meat-free options for Thanksgiving; a caution for online shoppers

Catching you up on overnight happenings, and what to know today.
Updated: 3 hours ago