

They did so quickly: the first drive was connected in under six minutes. We find that users picked up, plugged in, and clicked on files in 48% of the drives we dropped. To put this attack to the test, we dropped nearly 300 USB sticks on the University of Illinois Urbana-Champaign campus and measured who plugged in the drives. This left us wondering-does this attack actually work or is it merely a myth? This anecdote is so famous that it was the featured in the TV show Mister Robot in episode 6. If you attend any security conference, you will inevitably hear pentesters boasting that they can break into any company by dropping malicious USB drives in the companys parking lot.
