We reported earlier on the security threats spread by infected USB devices. Now, new research reveals just how widespread these threats are.
One out of every eight malware attacks involves an infected USB device, according to a recent report by security firm Avast Software.
The attacks often exploit the Windows AutoRun feature, which automatically runs executable files. The malware can then copy itself onto the machine and replicate itself every time the computer starts.
To keep malware from USB drives off of your network, experts recommend:
- disabling USB ports for users who don’t need them
- disabling auto-play for USB drives
- requiring drives and other devices to be approved by IT before they’re used, and
- training users not to use drives if they don’t know where they came from, and not to open unknown files contained on drives.