Reprogrammable microcontroller USB attacksġ) Rubber Ducky - a commercial keystroke injection attack platform released in 2010. The device looks like a particular USB device (e.g.: charger), but carries out the operations of another (e.g.: keyboard -injects keystrokes).ī1) By reprogramming the USB device's firmware to execute malicious actions (such as malware downloading, data exfiltration, etc.).ī2) By not reprogramming USB device firmware, but leveraging flaws in how operating systems normally interact with USB protocols/standards. A) By reprogramming the USB device's internal microcontroller.