A designer has created a USB device called PoisonTap, costing no a lot more than $5, which he declares can hack or hijack any computer’s web browser cookies and a lot more by simply being plugged into a spare USB port on the computer.
The device was shown hacking a Mac by means of a YouTube video, though the designer declares that there is no reason why PoisonTap, as he phone calls his USB-based contraption, will not work on other computing platforms such as PCs powered by Microsoft Windows.
Developer Samy Kamkar developed PoisonTap out of a Raspberry Pi microcomputer, and once the device is linked to an open USB port, it pretends to be an Internet connection, stealing cookies and such so long as a web browser is running on the target machine. Kambar points out that the target computer does not need to be unlocked in buy for the attack to find to fruition, though a web browser does need to be running in the background at least.
The device apparently needs no know-how to use and the hack can be carried out remotely must the need arise.
Once initiated, that attack allows for cookies to be stolen, enabling attackers to spoof a user’s identity across any social networks, or other web sites for which cookies were kept on the machine.
Kamkar describing PoisonTap and the exploits it employs to siphon cookies and install a web backdoor
According to Rik Ferguson of safety outfit trend Micro, the device is a plausible threat, especially considering that with cookies in play, two-factor authentication may not be enough to keep individuals safe. Ferguson says that HTTPS must be used going forward as that would also be a fantastic step forward for the web’s security, emphasizing that the ongoing step towards HTTPS rather than ordinary HTTP for web site access and distribution needs to continue.
And the quicker the better, really.
(Source: Samy Kamkar [YouTube])
You might also like to check out:
iOS 10.1.1 / iOS 10.2 Lock screen Bypass Discovered, provides access To Photos, Contacts [Video]
Some cheap Android Phones found sending personal data To China
How To create Bootable Windows 10 USB Flash Drive [Guide]
USB killer Vs iphone 7 plus Vs Google Pixel [Video]
You can follow us on Twitter, add us to your circle on Google+ or like our Facebook page to keep yourself updated on all the current from Microsoft, Google, Apple and the web.