Malware can spread through a pendrive (USB flash drive) when malicious code hides on the device and executes automatically or tricks the user into running it. How malware spreads via pendrive

1. Autorun / Autoplay exploits

• Older systems may automatically run files when a USB is inserted.
• Malware uses hidden autorun.inf files to execute itself instantly.
• This was common in older versions of Windows.

---

2. Malicious executable files

• The pendrive contains files like:
  • resume.exe
  • photos.exe
  • setup.exe
• These may look legitimate but install malware when opened.

---

3. Hidden or disguised files

• Malware hides using:
  • Hidden/system file attributes
  • Fake icons (folder icon but actually .exe)
• Users double-click thinking it’s a normal file.

---

4. Shortcut (.lnk) attacks

• Clicking a shortcut runs malware in the background.
• Common in worms that spread rapidly in offices or labs.

---

5. Cross-infection

• An infected computer copies malware onto every USB plugged into it.
• That USB then infects the next computer it’s used on.

---

Types of malware commonly spread by pendrive

• Worms – self-spreading malware
• Trojans – disguised as useful files
• Spyware / Keyloggers – steal passwords and data
• Ransomware – encrypts files
• Backdoors – allow remote access

---

Signs a pendrive may be infected

• Files turn into shortcuts
• Files disappear or become hidden
• Unknown .exe files appear
• Antivirus warnings when plugging in USB
• Computer slows down after USB insertion

---

How to prevent pendrive malware

• Disable Autorun/Autoplay
• Scan USB with antivirus before opening
• Enable “Show hidden files”
• Avoid unknown or shared pendrives
• Use write-protected USBs (if supported)
• Keep OS and antivirus updated

---

Real-world examples of malware spread via pendrive

1. Stuxnet (Industrial sabotage)

• Spread primarily through infected USB drives
• Targeted air-gapped systems (not connected to the internet)
• Infected nuclear facility computers by exploiting Windows USB vulnerabilities
• Showed that USB malware can bypass even high-security networks

---

2. Shortcut virus in offices & colleges

• Very common in computer labs, cyber cafés, offices
• USB files turn into shortcuts (.lnk)
• Clicking a shortcut runs malware and hides original files
• Spreads rapidly when the same pendrive is reused

---

3. Banking Trojans via shared pendrives

• Fake documents like:
  • Salary_Details.exe
  • Invoice.pdf.exe
• Victims double-click thinking it’s a document
• Malware steals banking credentials and passwords

---

4. Ransomware introduced through USB

• Employees plug personal USBs into office computers
• Malware encrypts local files and shared drives
• Organization faces data loss and ransom demands

---

5. Military & government incidents

• Infected USBs accidentally plugged into secure systems
• Led to temporary bans on USB usage
• Highlighted human error as a major security risk

---

Pendrive Malware Prevention Checklist

🔒 Before plugging in a pendrive

• Disable Autorun / Autoplay
• Use updated antivirus
• Avoid unknown or free promotional USBs
• Prefer trusted, personal pendrives

---

🧪 When a pendrive is inserted

• Do NOT double-click immediately
• Scan USB with antivirus first
• Enable “Show hidden files”
• Check for:
  • Unknown .exe files
  • Shortcut files replacing folders

---

📁 While using the pendrive

• Open files via Right-click → Scan
• Avoid running executables from USB
• Do not enable macros in documents
• Don’t use USB on multiple unknown computers

---

🚨 If infection is suspected

• Disconnect the pendrive immediately
• Run full system scan
• Clean or format the pendrive
• Recover hidden files (if shortcut virus)
• Change passwords (email, banking, work)

---

🧹 After cleanup

• Update OS and security patches
• Backup important data regularly
• Educate users about USB risks
• Use USB write-protection if available