badUSB Archives - ConfamTips Tech Group

Have you heard about OMG cable before? When last did you borrow a USB charger from people to charge your phone? Or are you among those of us who just plug in our phones on any available USB port or charger we see? What if I tell you that you may have been hacked using an OMG cable? We are in an age of technological advancement where everyone should carry their own charging cable around. It is now a risky venture to borrow a USB cable or port from people to charge your mobile device. It doesn’t matter if you are using an Android or an iPhone; once you connect or charge your phone using this malicious OMG cable, then you are hacked over Wi-Fi. This is very simple, and the hacker does not have to touch your phone. Therefore, know it today and share with your friends that not every USB cable is safe. These cables can be used to hack your Facebook, bank account, and other internet accounts once they get access to your phone. If you were not scared of USB cables before, this is the right time to be. Remember, the information in this post is for educational purposes and not to be used for malicious purposes. What is an OMG cable? OMG cable (Offensive MG Kit) is a product of the MG (Mischief Gadgets) team. It is a cable that can create a Wi-Fi hotspot connection capable of executing malicious code remotely. The OMG cable hides a backdoor inside the shell of the USB connector with a Wi-Fi microcontroller. This makes it possible that once this cable is plugged into your computer or phone, you will be a victim of remote attacks over the Wi-Fi. One bad thing about this cable is that it is very difficult to differentiate it from the regular USB cables we use to charge our phones. According to how Hak5 described this cable on their website, “every OMG cable is hand-built. They match the real thing with unbelievable accuracy.”. The cable was carefully made to make it difficult to differentiate from normal cables. Keep reading as we discuss possible ways to detect this malicious cable. Source: Hak5 website Another bad news, or rather, good news for hackers, is that Hak5 has teamed up with MG to allow more people to have access to the cable. This cable can now be bought from the hak5 website for about a hundred and some dollars. Just imagine your spouse or friend having an OMG cable now, and you don’t know and have been lending it to charge your device. OMG attacks are so easy to carry out that they can be done without using a computer. With a click of a button, the hacker can execute a payload on a connected device remotely. Suggested Post: How To Avoid Falling Victim To Fake Websites On Your First Visit What Happens When You Connect Your Phone to an OMG Cable? The moment you connect your device to an OMG lightning cable to charge, the attacker or the person who set up the cable can then control your phone remotely. The person can do that over the wireless Wi-Fi hotspot network created by the USB cable. Once the connection is established, the hacker can now execute any payload on your phone remotely. What they can now do on your phone depends on the kind of payload code they are executing. They can decide to install a keylogger on your phone, which will help them steal all the keystrokes you are pressing on your phone. These include your passwords and the website names you visit. The OMG keylogger edition developed to attack detachable keyboards has the capacity of storing up to 650,000 keystrokes. They can also decide to steal your Wi-Fi passwords or use your phone to perform an action they want. Remember, hackers can control your device with this cable over a 2-kilometer distance range. How to Detect Malicious USB Cables or OMG Cables The fact is that OMG cables are hand-built to make it difficult for you to differentiate them from regular USB cables. Though there are few ways to differentiate this cable, The number one and most common way is through the cable tag. There is a small tag attached to these cables with an OMG label. One thing you should note is that this is not reliable as the tags are removable. The second way is by using a malicious cable detector by OMG. This is a tool by OMG that helps detect if a cable is malicious by simply connecting it to the detector and then observing the lightning change. Also, this can be purchased from the Hak5 website. Suggested Post: 16 Cybersecurity Secrets Every Internet User Should Know How do you protect yourself from Malicious USB or OMG cables? The best way to remain safe from malicious or bad USB cables is to use cables from a trusted source, like your phone manufacturer or reliable cable vendors. Detecting these cables by looking at them is not easy. Therefore, avoid borrowing USB chargers from people. Remember, OMG cable is not the only malicious cable or bad USB out there. We have the USB ninja cables too. Remember that the USB Ruber Ducky is still there. Therefore, always be mindful of what you borrow and plug into your device. Remember to share this with your friends and family and remain protected. Suggested Post: VPN, Proxy, And Onion Services Simplified -All You Need To Know Before Using Them

Tag: badUSB

Dangerous OMG Cable Hacks: Secure Your Phone from USB Threats