Attacking networks through malware-infected USB drives used to be a popular tool for cybercriminals before cloud-based storage became more widespread. We know that cybercriminals will always try to find the low-hanging fruit by catching anyone who will let their guard down. That shouldn’t make it a surprise that it has been reported that these attacks have tripled in the first half of 2023.

There are two types of cyber attacks from malware-infected USB drives to be vigilant against: SOGU and SNOWYDRIVE:

SOGU

SOGU is considered to be a widespread, aggressive attack targeting the public and private sectors that can launch a backdoor on your network once the USB is plugged in and executed, tracking keystrokes and can take screenshots.

SNOWDRIVE

SNOWYDRIVE also creates a backdoor and gives attackers the ability to remotely issue system commands.

Organizations should proceed with caution using any external device and a found USB device should NEVER be plugged into a computer connected to an internal network. Drives should always be scanned for malicious codes or files before any use on an internal network. Cyber attacks from infected USB flash drives target systems and networks that are bypassing security updates and have outdated security patches to spread through networks. Cyber awareness training is one of the most effective and foremost ways to help you and your staff keep your networks safe from these types of threats.

Find out more and schedule a cyber awareness training with our team today!

Other Resources

  • Cybersecurity Awareness Month 2024: Steps to Secure Your Network
  • Strengthen Your Defenses: The Essential Steps for Conducting a Cybersecurity Gap Analysis
  • Insider Threat Awareness: Protecting Your Network From Within
  • Practical Cybersecurity Principles for PSAPs | eBook
  • Understanding the New CJIS Cybersecurity Requirements: A Guide