![\"newxusb\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2016\/12\/NewXUSB.jpg\")
Internet Security Researcher and Programmer Samy Kamkar has some seriously bad news for you and your company. He recently released a devastating proof of concept attack that can target pretty much every device on the web today and take a high degree of control over them.<\/p>\n
Even worse, he designed his proof of concept using off-the-shelf, Arduino components that literally anyone can get their hands on.<\/p>\n
He has dubbed his new attack \u201cPoison Tap,\u201d and it is insidious. All he has to do is plug his little USB device into any USB port on any device in your company\u2019s network, and it\u2019s off and running. The computer takes about thirty seconds to boot up, and another thirty seconds or so to ready its attack. After that, the device can be unplugged with no evidence that it was ever there.<\/p>\n
The attack takes advantage of the fact that when a new device is plugged into a USB port on your network, your network finds and identifies it. In this case, the device is disguised so that your network thinks it\u2019s an innocuous network adapter.<\/p>\n
Once connected to your network, it opens one million invisible browser tabs which sit there silently, and completely invisible to the user. These invisible connections are back doors which can be used to send instructions and receive network information.<\/p>\n
Any time the user on an infected machine opens a web page, the cookies and other relevant information related to that page can be re-routed to a server controlled by the hacker, giving them easy access to network information, passwords and the like.<\/p>\n
Even worse, the software can seek out routers \u2013 even routers that aren\u2019t normally accessible from outside the company\u2019s firewall, and start changing DNS information, re-routing traffic, locking users out and so forth.<\/p>\n
If there\u2019s a silver lining to be had here, it is the fact that this attack is fairly easy to prevent. First, it requires physical access to a USB port, which makes it somewhat difficult to pull off. Second, if the user in question closes his or her web browser before locking his computer and walking away, the attack can\u2019t even get off the ground. Nonetheless, Poison Tab is a disturbing, and potentially devastating new attack vector to be aware of.<\/p>\n","protected":false},"excerpt":{"rendered":"
Internet Security Researcher and Programmer Samy Kamkar has some seriously bad news for you and your company. He recently released a devastating proof of concept attack that can target pretty much every device on the web today and take a high degree of control over them. Even worse, he designed his proof of concept using […]<\/p>\n","protected":false},"author":5,"featured_media":25022,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[34,30],"yoast_head":"\n