Skip to content

T1427 Attack PC via USB Connection

With escalated privileges, an adversary could program the mobile device to impersonate USB devices such as input devices (keyboard and mouse), storage devices, and/or networking devices in order to attack a physically connected PC12 This technique has been demonstrated on Android. We are unaware of any demonstrations on iOS.

Item Value
ID T1427
Sub-techniques
Tactics TA0033
Platforms Android
Version 1.1
Created 25 October 2017
Last Modified 03 February 2019

Mitigations

ID Mitigation Description
M1001 Security Updates -
M1006 Use Recent OS Version -
M1011 User Guidance Advise users to only connect mobile devices to PCs when a justified need exists (e.g., mobile app development and debugging).

References

  1. Z. Wang and A. Stavrou. (2010, December 6-10). Exploiting smart-phone USB connectivity for fun and profit. Retrieved December 22, 2016. ↩

  2. Dan Goodin. (2016, November 16). Meet PoisonTap, the $5 tool that ransacks password-protected computers. Retrieved December 22, 2016. ↩

Back to top