Student Faces 10 Years In Prison for Using a ‘USB Kill’ Stick - - - A former
student of the College of Saint Rose who has destroyed equipment belonging to
the university and worth roughly $51k has admitted his guilt and now faces a
sentence of 10 years in prison, as well as $250k in fines. The student is an
Indian named Vishwanath Akuthota and was studying “computer information systems”
in the New York college, following the completion of his Master’s in Business.
At some point, and without a clear reason, Akuthota started destroying computers
using a “USB Kill”, a $50 device that can perform electrical overloading to the
USB port circuitry, passing a 200-volt discharge over the data lines of the
victimized device. USB sticks can infect a system with malware or exfiltrate
data upon their connection, but electrical attacks is a serious possibility that
most computer and laptop manufacturers just don’t take into account. Because
shielding the USB input from electrical overloading has an additional cost,
about 95% of systems out there are vulnerable to these cheap “USB Kill” sticks.
Apple is one of the few that shields its products, so it’s invulnerable to those
destructive sticks. Akuthota has victimized 59 computers, and another seven
computer monitors that featured USB ports. The man probably did it for fun, or
maybe to raise awareness on the importance of shielding. The fact that he took a
video of his “killing spree” pertains to both possible justifications behind his
actions, but it is this very move that uncovered him. By accounting another $7k
which is the cost of the investigations, the total damage caused by Akuthota is
about $58.5k. As those nasty little sticks need only a couple of seconds to
charge their capacitors and direct the energy back into the system’s circuitry,
getting to the bottom of it was hard for the investigators who worked with the
college to figure out what was going on. 📌 This case is a good reminder of the
dangers that lurk in the practice of plugging anything into our USB ports.
Moreover, the amount of financial damage caused by a single, non-motivated,
educated person “just for the fun of it” is an excellent chance for hardware
manufacturers to rethink their approach in “USB shielding”, and maybe take that
extra protective step and market it accordingly. It’s about time we render those
USB kill sticks obsolete.