Schneier20on20Security3A20Hacking20Computers20Over20USB
http3A2F2Fwww.schneier.com2Fcgi-bin2Fmt2Fmt-tb.cgi2F929
This is an interesting and very common attack vector. Bruce has it nailed as well. The best fix? turn off autorun to start. I would disable all usb ports if possible. MacOs used to have this feature until a virus used it to spread. Now it’s gone. I’m surprised the windows virus folks have not seized on this one.