Browse Definitions :
Definition

USB Killer

A USB Killer is USB drive that has been modified to deliver an electrical surge that can damage or destroy hardware when the altered thumb drive is inserted into a computer's USB port.The modified drive essentially commands the computer's on-board capacitors to rapidly charge and discharge repeatedly. If left alone, the repeated overcharging will overload the USB port and physically destroy the computer's electrical system.

Essentially, a USB Killer works by delivering 210-220 volts to an interface that is designed for 5 volts. The overpowered-surge can damage or destroy not only ports, but also attached hardware. The concept behind USB Killer is similar to that of Ethernet Killer, a modified power cord that does much the same thing.

USB Killer is sold commercially under the name USB Kill. The original concept behind the device was allegedly to help hardware manufacturers and network administrators determine how well a digital device could withstand power surges and electrostatic discharge (ESD). Since its invention, however, this type of altered thumb drive has not been used for penetration testing by any major company -- it has proved popular with cybercriminals, however. 

The concept of a USB Killer is credited to a Russian computer researcher known as Dark purple. In the United States, USB Killer was infamously used in the wild by a student at the College of Saint Rose in upstate New York. The student, who used his iPhone to record himself using USB Killer, destroyed over 60 college computers and was sentenced in 2019 to one year in federal prison. 

To avoid being harmed by a rogue USB Killer, security experts recommend that network administrators and end users take the following steps:

  • Apply firmware updates as soon as they become available.
  • Refrain from using USB drives of unknown origin.
  • Cap USB ports on mission-critical devices. 

This was last updated in June 2019

Continue Reading About USB Killer

SearchCompliance
  • OPSEC (operations security)

    OPSEC (operations security) is a security and risk management process and strategy that classifies information, then determines ...

  • smart contract

    A smart contract is a decentralized application that executes business logic in response to events.

  • compliance risk

    Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting ...

SearchSecurity
  • threat modeling

    Threat modeling is a procedure for optimizing application, system or business process security by identifying objectives and ...

  • distributed denial-of-service (DDoS) attack

    A distributed denial-of-service (DDoS) attack is one in which multiple compromised computer systems attack a target, such as a ...

  • social engineering

    Social engineering is an attack vector that relies heavily on human interaction and often involves manipulating people into ...

SearchHealthIT
SearchDisasterRecovery
  • change control

    Change control is a systematic approach to managing all changes made to a product or system.

  • disaster recovery (DR)

    Disaster recovery (DR) is an organization's ability to respond to and recover from an event that affects business operations.

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

SearchStorage
  • bare-metal cloud

    Bare-metal cloud is a public cloud service that offers dedicated hardware resources without any installed operating systems or ...

  • race condition

    A race condition is an undesirable situation that occurs when a device or system attempts to perform two or more operations at ...

  • storage security

    Storage security is the group of parameters and settings that make storage resources available to authorized users and trusted ...

Close