BADUSB ATTACK EXPLAINED: FROM PRINCIPLES TO PRACTICE AND DEFENSE

Summary from the TLDR InfoSec newsletter

This post dives into BadUSB, an attack method introduced in 2014 where hackers reprogram USB device firmware to disguise it as a keyboard. When plugged in, the fake USB device automatically types malicious commands into the computer. Antivirus software cannot detect these attacks since they appear as legitimate keyboard input.