Skip to main content
News

It’s a trap!

Most of us like to get free stuff. It’s nice to get the odd DHC branded coffee mug or hat. But when it comes to swag, make sure it’s intended for you and that it comes from a trusted source.

As part of our commitment to cybersecurity, the IT team recently conducted a test by leaving DHC branded USB drives around our offices. You might have seen them lying around in meeting rooms.

Why do we do that?
It helps us assess how well we all understand cybersecurity threats. Cybercriminals will often print company logos on USBs and give them away at trade shows or plant them in high traffic areas to smuggle their software into our network.

If none of the USBs were used, we’d know we’re in good shape. It is a safe, but effective, way to learn that you can’t trust devices if you don’t know where they came from. Unfortunately, a few folks plugged these into DHC devices and accessed the files.

Why it matters
Malicious USB drives can:
•    Spread malware that corrupts our data or spies on our activities.
•    Give attackers access to sensitive company information.
•    Compromise our network, causing costly disruptions.

How you can help
1.    Never use unknown USBs: If you find an unfamiliar USB drive, don’t plug it in.
2.    Report it: Contact IT Security immediately if you come across one.
3.    Ask for help: Unsure about a device? Reach out to IT Security.

Protecting our data starts with simple actions. If you’d like to learn more, join our USB Security Training by contacting IT Security.

Together, we can keep DHC secure.
 

USBs in the News

Desjardins Data Breach
Between 2017 and 2019, Desjardins suffered a major breach, exposing personal information, partly linked to improper use of USB devices, prompting an investigation by the Office of the Privacy Commissioner of Canada.
  SOGU and SNOWYDRIVE Attacks 
Targeting both public and private sector entities across the world, SOGU is the most prevalent USB-based cyber espionage attack using USB flash drives and one of the most aggressive cyber espionage campaigns targeting both public and private sector organizations globally across industry verticals.
         
Stuxnet (Global)
The Stuxnet worm, deployed via USB drives, caused massive disruptions to industrial control systems globally, including major national infrastructure targets.
 

Team: News

Originally by: Adam Schnell