Contact us today!
(954) 575-3992
facebook linkedin Business Solutions & Software Group RSS Feed

Michael DeMarco

Business Solutions & Software Group has been serving the Coral Springs area since 2005, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Malware BadUSB Challenges Our Dependency on USB Technology

b2ap3_thumbnail_usb_malware_400.jpgYour office is likely full-to-bursting with devices utilizing USB technology. It's been a popular way to connect external devices to PCs since the 1.1 version was released in 1998. However, it may be the technology's popularity that will cause its downfall as hackers develop ways to use the device to their advantage.

A USB vulnerability was recently found by researchers Karston Nohl and Jakob Lell. They came to the conclusion that the USB software is fundamentally broken and can be exploited by hackers. This is a major find because they're saying that it's the firmware used in every USB device is flawed, which is separate from the flash memory the device uses to do what it's designed to do.

To bring attention to this USB vulnerability, the two researchers created a malware called BadUSB. This malware has the potential to comprise an entire PC if it's installed on a USB drive. This malware can alter files, manipulate Internet browsing, and more--all without being detected! BadUSB is able to bypass detection measures from security protocols such as antivirus scans by embedding itself within the firmware that controls the functions of the USB device. Therefore, even if the device's flash memory storage were deleted, it wouldn't erase the BadUSB malware.

Essentially, once a device becomes infected with BadUSB, the malware is on there for good and it can't be fixed. A simple patch won't do the trick. The problem lies within the physical device itself and would take rewriting the code of the USB device. The malware changes the code for the controller chip--the chip responsible for the device-to-PC communication. Malware hidden in the device's firmware would be able to go undetected by even an experienced IT technician. If the code can't be detected, then it can't be scrubbed. The only way to find the malware would be to reverse-engineer the code--a major task.

If this malware were to be used by hackers and become widely distributed, then the only way to counter BadUSB would be to stop using USB devices altogether. All you have to do is take a quick look around your office at all of your USB devices to realize just how impossible of a preventive move this would be. Even the wireless devices like mouses and keyboards connect to PCs using a USB adaptor.

It would be next to impossible to stop using USB technology, but one thing you can do is be extra careful about what USB devices you allow to connect to your workstations and network. For example, only using new USB devices would be a safer move than allowing unchecked secondhand devices to plug into your company's workstations.

Since most mobile devices utilize USB technology, one of the best preventive measures you can take is to have a strong Bring Your Own Device policy. This includes having strict measures in place, like only allowing approved devices to access your company's network. You can even go as far as disabling open USB ports on workstations in order to prevent unnecessary access from infected devices.

Business Solutions & Software Group can arm your business with some BadSolutions that will keep your business safe from malicious malware. Our strongest malware deterrent is our Unified Threat Management solution that offers your business comprehensive enterprise-level security for your entire network. Call us at (954) 575-3992 to learn more.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Friday, 29 March 2024
If you'd like to register, please fill in the username, password and name fields.

Captcha Image

Latest News

Our Site Has Launched!

flag

Welcome to Our New Site!
We are proud to announce the unveiling of our new website at Business Solutions & Software Group!

Read more...

Contact Us

Learn more about what Business Solutions & Software Group can do for your business.

callphone

Call us today    (954) 575-3992

10211 W Sample Road
Suite 114
Coral Springs, Florida 33065

facebook linkedin #