Introducing MERENA+ — our premium tier with your personalized safety dashboard, risk score, and all security tools. Sign up and cancel risk free in the first 14 days on the annual plan.Learn More
MERENA
Advisory Alert

Plug and Pwn attack uses fake USB devices for Windows SYSTEM access

Researchers found a new attack in which a fake USB device can trick Windows into installing unsafe software, giving an attacker deep control over the computer. This means simply plugging in an untrusted device could put a Windows PC at serious risk.


Who is at risk

Anyone who uses a Windows computer and may connect unknown, borrowed, found, or unverified USB devices is most at risk.

What to watch for

Watch for unexpected software installing after a device is plugged in, repeated pop-ups about new hardware, or a computer acting strangely right after connecting a USB device.

What to do

Do not plug unknown USB devices into your Windows computer, and make sure Windows, device software, and security updates are fully installed as soon as possible.