Cyber criminals are sending out malware infected USB sticks in the post

According to reports, the FBI are aware of cyber criminals who are sending out malware infected USB sticks in the post and are urging recipients to avoid inserting the harmful drives into their IT devices.

The dangerous USB sticks containing ‘BadUSB’, and purporting to be from organisations such as the US Department of Health and Human Services, are configured to register as a keyboard device after being plugged in.

This could allow the attacker the ability to execute commands on behalf of the logged-in user and install malware.

According to The Record, the FBI warned that the new BadUSB attacks were shipped on LILYGO-branded devices. The mail was delivered in packages to organizations in the transport and insurance sectors from August, while defence industry targets have received the packages since November.