A user has found a USB pen drive in the corporate parking lot. What should the user do with this pen drive?
- throw the pen drive away
- deliver the pen drive to the security sector of the company
- plug the pen drive into a computer of the company, try to delete all the files, and use the pen drive for personal use
- plug the pen drive into a computer of the company, try to access the files to identify who the pen drive belongs to
|
Explanation & Hint: Many pen testers and attackers have used Universal Serial Bus (USB) drop key attacks to successfully compromise victim systems. This attack involves leaving USB sticks (USB keys or USB pen drives) unattended or placing these pen drives in strategic locations. Frequently, users think these devices are lost and insert these pen drives into the systems to figure out whom to return the devices to;w it, they download before they know and install malware. Plugging in that USB stick lying on the street outside an office could lead to a security breach. The best thing to do is to deliver the pen drive to the security sector of the company. |