Security Awareness Briefing // Defensive Use Only // Know Your Enemy
Plug & Prey
It looks like a mouse. It types like an intruder.
A plain-language field guide to BadUSB / HID-injection attacks — the trusted device that turns on you.
01 / What it is
A BadUSB device is a peripheral that lies about what it is. Plug it in and it quietly tells the computer it’s a keyboard — a Human Interface Device (HID). Machines trust keyboards completely: no install, no warning, no click required.
02 / How the attack works
1
Plugged in — looks like an ordinary stick, mouse or cable.
2
Announces itself to the system as a keyboard (HID).
3
The OS trusts it automatically — no prompt, no scan.
4
It “types” a burst of commands far faster than a human could.
→ In seconds it can open a foothold on the machine, then be pulled back out. No file is left behind for anyone to find.
Where it hides — the disguises
The proof-of-concept is only the demo. The same trick fits inside any everyday peripheral:
USB Stick
Mouse
Keyboard
Charging Cable
03 / Why it’s dangerous
Nothing to scan — antivirus sees keystrokes, not a malicious file.
Works in seconds, then unplugs and walks out the door.
Beats “never download anything” training — it needs no download.
Every machine trusts its own keyboard, by default, forever.
04 / How you shut it down
USB device control — allow-list approved devices; block new HIDs by policy.
Lock or cap unused ports; fit port blockers on exposed machines.
Never plug in found or “free” sticks, cables or dongles.
Set endpoints to flag a newly-connected keyboard for approval.
Keep physical control of machines and disable autorun.
Directed by human error · Starring the device you already trust
An Eriu Technology security briefing · Proof of concept, for awareness & defence only · No build instructions