Now for the "bad news" about USB devices (flash drives, USB cables, keyboards, mice, and so on.) This does not include bluetooth enabled devices where there is no physical connection with your PC. It is that physical Type A USB connector that plugs into your PC that is worrisome.
There are two inside components to a USB flash device. There is the RAM or memory area, and then the “firmware” area that helps sit between your PCs USB port and the USB device’s RAM to help your PC access the RAM (read only memory). It is the firmware that can be pre-programmed at the factory source, or anyone with the ability to flash the firmware, to deliver all sorts of malicious stuff to your PC once it plugs into the USB port.
RAM or the memory area of your USB can be scanned using anti-virus software to root out bad stuff on your USB device. However, there is no way to scan the firm-ware part of the USB device. You get what you pay for, so again be warned to avoid cheap USB devices. Those cheap cables or USB devices on Amazon, etc? You will never know that anything is wrong with the USB device.
Would you use another friend’s USB device on YOUR PC? Or how about if you found a 512 gb (nice size) USB device on the street, or in your mailbox? Would you use it? I would hope not because you know nothing about how and where the device was manufactured. Just toss it! Returning back to the friend’s USB device question, my recommendation is to avoid another person’s device. Again, you don’t know where it has been.
Once the malware has been uploaded to your PC from the USB device’s infected firmware, the “fun” starts. Every single Type A USB device can be programmed now to spread the malicious software, keyboards, mouse, trackpads, other storage devices, and such. Think about your keyboard. It’s just an input device, right? If there is key-logging software programmed into your keyboard’s firmware and you are entering passwords and such, whatever is typed can be passed on to the hacker’s site invisibly.
The very same issue of firmware interface programming is also true for USB Type A cables. It is that plug-in end that can create malware nightmares. This is why the USB Type C cables were developed. There is NO interface firmware in them. They are just a cable connected between a USB device and the PC.
I may sound paranoid, but all of this cybersecurity stuff is very real and concerning, and we need to stay safe in today’s world. Avoiding the use of non-brand name USB flash devices can go a long way to protect you from malicious intrusions into your PCs data.
BE VERY AWARE OF HOW YOU USE THESE DEVICES!!! This is NOT going to be something that can be fixed with time. USB-Type A standards were compromised from the start. The newer USB-C standards are becoming more popular and are much faster as well. The extent of security built into this standard will be seen as time goes on.