USB Killer

A USB Killer is a device that looks similar to a USB thumb drive that sends high-voltage power surges into the device it is connected to, which can damage hardware components. Its manufacturers claim the device has been designed to test components for protection from power surges and electrostatic discharge; however, there have been several instances of malicious use, and the device is not used for device testing by any major company. The device is often mentioned in articles warning readers against plugging in unknown USB drives.[1][2][3]

This article is about the USB device. For computer software, see USBKill.
USB Killer
A USB killer device.

Mechanism

The device collects power from the USB power source of the component it is connected to in its capacitors until it reaches a high voltage and then it discharges the high voltage onto the data pins.[2] Versions 2 and 3 of the device may generate a voltage of 215 to 220 volts.[4]

This device has been compared to the Etherkiller,[5] a family of cables that feed mains electricity into low-voltage sockets such as RJ45.[4]

Models

There are different models of the device, the latest being USB Killer v3. Earlier generations, including USB Killer v2, were developed by a Russian computer researcher with the alias Dark Purple.[3][4]

Similar homemade devices have been constructed from USB air ionisers[6] and camera flash parts,[7] both of which already feature high-voltage circuitry. A more recent version uses the piezo inverter transformer from a CCFL driver with a simple two transistor resonant Royer oscillator, one shot timer and a spark gap as a lightweight way to generate an 1800V sharp pulse more closely simulating a low power electrostatic discharge for mitigation and circuit testing purposes. [8] The prototype has a countdown timer and ascending bleep warning to reduce the chances of accidental or malicious use.

Potential defenses

One author believes that the new cryptographic authentication protocol for USB-C authentication announced by the USB Implementers Forum would help to protect against this device by preventing unauthorized USB connections from being made, although some manufacturers now claim that they can bypass this protocol.[9] Some developers of the device believe that an optocoupler can protect against the device but from later testing even applying a short risetime high voltage pulse to the case can damage some sensitive systems. [1]

Incidents

In April 2019, a 27-year-old Indian former student of the College of Saint Rose, Vishwanath Akuthota, pleaded guilty to destroying 59 computers in his college using a USB killer, resulting in over $50,000 in damages.[10][11] He also destroyed seven computer monitors and computer-enhanced podiums.[10] He was sentenced to 12 months in prison, followed by a year of supervised release for doing so, in August 2019. He was also ordered to pay $58,471 as restitution charge.[10]

References
  1. Armasu, Lucian (2017-08-12). "'USB Killer 2.0' Shows That Most USB-Enabled Devices Are Vulnerable To Power Surge Attacks". "tomshardware.com".
  2. "USB Killer: A device that can destroy a PC in seconds". DECCAN CHRONICLE. 2017-08-12.
  3. Bolton, Doug (2017-08-12). "Russian computer researcher creates a USB killer thumb drive that will fry your computer in seconds". "independent.co.uk".
  4. "The USB Killer, Version 2.0". Hackaday. 10 October 2015.
  5. "The Etherkiller". Retrieved 3 October 2018. It all started one day with this guy, the original Etherkiller, developed with a few misc parts to warn new users that the IT department is not to be messed with. You too can make one at home, connect the transmit pins of the RJ-45 to HOT on 110VAC and the receive pins to Common.
  6. Tomas C (27 June 2018). "This $3 DIY USB Device Will Kill Your Computer – Hacker Noon". Hacker Noon. Retrieved 2 October 2018.
  7. Buis, Juan (9 November 2016). "This terrifying homemade USB killer will instantly kill your computer". The Next Web.
  8. https://www.globalspec.com/industrial-directory/rosen_type_piezoelectric_transformers
  9. Anthony, Sebastian. "USB Killer now lets you fry most Lightning and USB-C devices for $55". Ars Technica.
  10. "Indian Student in US Sentenced to 1-Year in Prison for Damaging University Computers". NDTV Gadgets 360. 14 August 2019. Retrieved 16 April 2019.
  11. https://www.justice.gov/usao-ndny/pr/former-student-pleads-guilty-destroying-computers-college-st-rose
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.