Hackers disguise phone as keyboard, use it to attack PCs via USB

[radio667]

from engadget.com ............. We've seen hackers use keyboards to deliver malicious code to computers , and we've seen smartphones used as remote controls for cars and TV -- but we've never seen a smartphone disguised as a keyboard used to control a computer, until now. A couple folks at this year's Black Hat DC conference have devised a clever bit of code that allows a rooted smartphone -- connected to a PC through USB -- to pose as a keyboard or mouse in order to attack and control the computer. The hack takes advantage of USB's inability to authenticate connected devices coupled with operating systems' inability to filter USB packets, which would enable users to thwart such an attack. While utilizing a digital costume to hack a computer is a nifty idea, it doesn't pose much additional risk to users because the method still requires physical access to a USB port to work -- and most of us would probably notice someone plugging a smartphone into our laptop while we're using it.


Via : CNET

[JoystickMonkey]

Now they need to actually put a phone into a keyboard and disguise the keyboard as a phone to the end user as well as the computer.

[Dorkorama]

Originally Posted by radio667

from engadget.com ... The hack takes advantage of USB's inability to authenticate connected devices coupled with operating systems' inability to filter USB packets, which would enable users to thwart such an attack. ... it doesn't pose much additional risk to users because the method still requires physical access to a USB port to work --

Via : CNET

*sigh* I'd call it an overlooked security issue, but then nobody would be able to code. As long as the computer is not operated under an administrator account, a hacker shouldn't gain access with this method.

They are wrong about necessarily requiring physical access, though.