USB Kill

A USB Killer is a device that is designed to be portable and sends high-voltage power surges repeatedly into the data lines of the device it is connected to, which will damage hardware components on unprotected devices.

In April 2019, a student at the College of Saint Rose in Albany, New York pleaded guilty to destroying 66 computers in his college using a USB killer. He also destroyed seven computer monitors and computer-enhanced podiums. He was sentenced to 12 months in prison, followed by a year of supervised release. He was ordered to pay $58,471 in restitution.

The device typically contains several capacitors and charge and discharge circuitry. When the device is connected to a USB port, the capacitors are charged from the USB port’s 5 volt supply. When they are fully charged, the device discharges them through step-up circuitry, which delivers a high voltage back into the USB port. Versions of the device have been reported to deliver a pulse of around 200 volts.

The USB Kill 2.0 was constructed last year by a Hong Kong Based Company. A Russian hacker named Dark Purple was known to be the first to create a prototype of the USB Kill. The official site does not reveal the name of the company that created it but it recent reports reveals that the company is a Hong-Kong based one. The USB Killer was initially designed by Dark Purple for the security researchers that work on the USB standards. This could be used as something to protect their devices from any kind of high voltage attacks.

USB Kill works upon 95% customer devices except for Apple devices that have their hardware protected against such type of power surge attacks. The USB Kill is not only limited to the computers or laptops.

It can work on a TV, a fax machine or a smartphone that features USB plugging. Basically, the USB Kill can be used on any device with a USB slot. The USB Kill is now available on the internet at a price around $56 and can be used as a malicious device to render your PC dead.

But it was initially designed with to spread awareness regarding the power attack surges through USBs and other sources. The companies need to change their hardware design in order to make them resistant to such attacks, like Apple. It should be noted that USB air ionizers are often used for DIY USB Killers because they have the closest internal components to USB Killers.

The USB Promoter Group^[1] announced a new cryptographic authentication protocol for USB Type-C devices that should put an end to faulty as well as malicious Type-C chargers and devices. The best protection is to prevent one of these devices from ever being inserted into your computer.

That means the physical security around your computer has to be adequate. If people you don’t know can walk by and plug stuff into your computer while you’re away, that’s an invitation for trouble. If you use a USB killer device on anything you don’t own yourself, you’re committing a serious crime.

At the very least, you’re liable for property destruction and quite likely for other damages such as loss of data or productivity. USB kill sticks are not toys; they are dangerous and destructive devices that can cause hundreds, thousands, or even millions in damage in the wrong hands. Even if you have nefarious intentions, using a USB kill stick is incredibly risky for you! It means that you have to perform the attack physically.

It’s vital that every user knows about the existence of USB kill sticks, but strongly advise that you think twice before you ever consider purchasing or using one.