USB Threats: A Growing Menace to Critical Infrastructure in the Age of Cybercrime

As per a report published by Honeywell, critical infrastructure managed by operational technology (OT), including hardware and software used to control physical assets such as industrial equipment and building management systems, remains a prime target for cyber threats originating from USB devices. The study highlights the growing trend of malware targeting removable media like USB devices, with attacks on these devices accounting for over half of total attacks in 2024 – a significant increase from the 9% reported in the previous 2019 report.

The report emphasizes the necessity for OT environments to enhance their cybersecurity measures due to the rising number and sophistication of cyberattacks targeting industrial facilities in recent years. Specifically, the study delved into the presence of malware transmitted via USB storage devices used to transfer files within and between industrial sites.

Cyber attackers are increasingly adept at infiltrating industrial environments, displaying a deep understanding of their operations. This expertise enables them to stay hidden within industrial control systems, laying the groundwork for potentially devastating attacks exploiting the systems’ intrinsic functionalities.

Malware aimed at industrial systems is on the upswing, with 31% of total malware attacks specifically targeting these systems and sites. This represents a significant increase from 2016 when industrial-targeted malware attacks were recorded at 16%. The report outlines the damaging effects malware can have on OT environments, such as disrupting visibility, control or causing system downtime.

In conclusion, Honeywell’s research reveals that OT environments must take urgent action to enhance their cybersecurity measures against an ever-growing threat posed by cybercriminals who are becoming increasingly adept at infiltrating industrial environments.