Cybersecurity Awareness Session at the Teen Service

Listen to this Post

This morning, I had the privilege of conducting an engaging and informative cybersecurity session with the teen service. During the session, I demonstrated the risks associated with the OMG Cable and emphasized the importance of vigilance when encountering unfamiliar devices or cables.

I also encouraged them to extend this knowledge to their parents and guardians, fostering a culture of cybersecurity awareness within their households. It was a rewarding experience, and I hope these lessons empower them to stay safe in the digital world.

You Should Know:

Understanding the OMG Cable Risks

The OMG Cable is a malicious USB device that can act as a keystroke injector, allowing attackers to execute commands on a victimโ€™s machine. Below are some defensive measures and related cybersecurity commands:

Defensive Commands (Linux & Windows)

1. Check USB Devices (Linux):

lsusb  List connected USB devices 
dmesg | grep usb  Check USB connection logs 

2. Disable USB Storage (Linux):

echo "install usb-storage /bin/true" | sudo tee /etc/modprobe.d/disable-usb-storage.conf 
sudo modprobe -r usb-storage 

3. Windows USB Device Control:

Get-PnpDevice -PresentOnly | Where-Object { $_.InstanceId -match '^USB' }  List USB devices 

4. Disable AutoRun (Windows):

Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" -Name "NoDriveTypeAutoRun" -Value 255 

Penetration Testing Simulation (For Awareness)

1. Detecting Malicious USB (Linux):

sudo apt install usbguard 
sudo systemctl enable --now usbguard 
sudo usbguard generate-policy > /etc/usbguard/rules.conf 

2. Monitoring USB Activity (Windows):

Get-WinEvent -LogName "Microsoft-Windows-DriverFrameworks-UserMode/Operational" | Where-Object { $_.Message -like "USB" } 

Digital Forensics & Incident Response (DFIR)

1. Analyzing USB History (Windows):

Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Enum\USBSTOR\" | Select-Object FriendlyName,PSChildName 

2. Linux USB Forensics:

journalctl --since "1 hour ago" | grep -i usb 

What Undercode Say

Cybersecurity awareness is crucial in preventing attacks like those executed via malicious USB devices. Always verify unknown hardware, disable unnecessary USB functionalities, and monitor device logs regularly. Understanding these risks and applying defensive measures can significantly reduce exposure to hardware-based attacks.

Expected Output:

  • List of connected USB devices
  • Logs of recent USB activity
  • Confirmation of disabled USB storage
  • Detected malicious USB attempts (if any)

Stay vigilant and keep your systems secure! ๐Ÿ”’

References:

Reported By: Daniel Anyemedu – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass โœ…

Join Our Cyber World:

๐Ÿ’ฌ Whatsapp | ๐Ÿ’ฌ TelegramFeatured Image