Jump to content

Malware in a mouse...maybe a rubber ducky too...


Recommended Posts

I just found this on the hackaday site , it is an article on how a group of germans have built a device that injects malware via a mouse.

Maybe an idea for expanding the duck... A memory stick hidden inside

The link is at http://hackaday.com/2014/03/30/malware-in-a-mouse/

Link to comment
Share on other sites

I just found this on the hackaday site , it is an article on how a group of germans have built a device that injects malware via a mouse.

Maybe an idea for expanding the duck... A memory stick hidden inside

The link is at http://hackaday.com/2014/03/30/malware-in-a-mouse/

I guess you didnt see where it is an april fools joke.

Link to comment
Share on other sites

I was more interested in the concept.

Replace the mouse inners with the duck, could even hook up one of the buttons to the payload delevery button.

would make the perfect cover....oh my mouse isn't working, can I test it on your computer....hidden in plane sight.....

Link to comment
Share on other sites

No april fools from the looks of it. The original article is this, to appear in germany's C't magazine issue 8 of this year and the article has a publish date of 27 march which in my view disqualifies it as an april fools article.

While the article is rather light on novelty (make the mouse register as usb mouse and keyboard and let the mouse work as expected while the keyboard types nefarious commands at the machine at some point) it's a valid concept and better disguised than the ducky which, once insterted into your computer, will not be identified as a storage stick (right?) which might raise suspicion.

What I like about the concept suggested in the article is that you combine something that you would typically _want_ to attach to your computer and trust without question with something nefarious which, being attached to the mouse, is potentially capable of determining when you're not likely to be using the computer and as such probably won't be around to notice its payload as it's being let loose on your machine. For most people something like 10 minutes without mouse activity means the device has been abandoned for some time. I definately see potential here.

Link to comment
Share on other sites

I had time to think on this today, what I will do over the next couple of days is find an old mouse, maybe raid one from work, as I use track balls at home, I don't tend to have spare mouse lying around at home

Instead of replacing the inners, I will use a dremmel and cut the mouse boards pcb track at the USB head.

Then one of my spare ducks, I will solder wires to connect to the cable, also solder wires to the scroll wheel switch and to the payload button.

If this works, I can't see why it wouldn't, I could try to spice a memory stick in as well.

Be an interesting experiment....

Link to comment
Share on other sites

Wouldn't there be 2 controller chips vying for control of the usb data channel? If it were as simple as you suggest, wouldn't a USB hub contain no logic and instead just wire all the left data pins together on the same line and similarly all the right data pins together on the same line and then send that on to the PC?

I have severe doubts about this idea of yours.

Link to comment
Share on other sites

I should be able to get the duck to work, that is why I need to cut the tracks on the mouse board, to kill the controller chip,.

I want to leave the board inplace as the micro switch for the buttons are there, I just want to wire up one switch to the duck

The mouse board would be dead...

I have found a spare at work, will have a go tonight to see if I can get the basic concept to work

Link to comment
Share on other sites

I see your point cooper. when i went to get a USB cable to chop up for this, I found this very small micro USB hub, see the photo of it without its casing

so here is the plan, I will cut the mouse board at the line shown, leaving the switches in place, then remove the USB connectors form the duck and three of the four ports, hard wire the duck to one port, trim the other two ports back, the duck will fold under the hub board.

I will leave one USB intact for connecting a memory stick

wire the duck button to one of the mouse button.

This should fit within the mouse.

this may take a few days...but I will keep this post updated on the outcome.

Link to comment
Share on other sites

Surgery begins...

been busy the last three days, so I am only getting around to this today.

After losing my first patient on the operating table, I lifted the pad off the PCB when attempting to remove the USB connection from the Duck and killed the duck, I decided to tackle this another way on another duck...will need to order more Darren soon....

1st I removed as much solder with soldering braid, before taking a needle file and slowly cut the connection before removing the USB socket, then cleaning the pad of the remaining lug and solder.

The plan is to minimize the foot print of all the components to fit within a working mouse

see next post

Link to comment
Share on other sites

Next

i removed all the USB sockets from the micro USB hub, and trimmed the board down leaving soldering pads for three of the four USB hubs.

I am keeping one socket to connect by wires for the micro 8Gb usb stick to plug into

so the duck will be hard wired to one port, 8gb stick on another, and then later hook the mouse to the third remaining port.

I have trimmed everything down so the duck will tuck underneath the hub board, the 8Gb stick will sit on top and then rap with heat shrink.

This will keep a nice tight little foot print that will fit within the working mouse and its board.

I have changed my mind on trying to hook on button to the duck, it is going to be tight fit on the board, maybe later

Will post more over the next couple of days

Link to comment
Share on other sites

hooking it up....

I have soldered together all the componets, this is really fiddly...

Unless you really have good soldering skills, and a good head magnifer and lighting, this would be hard, also a good soldering iron with a point tip is a must..

i have tried to solder the micro USB stick directly to the micro router board, but when plugged in, it is coming up as a failed device, I had tried to be a quick as possible when soldering, but it may have cooked it, or that port has failed.

never mind, i will sort this later, will buy another and try again with the socket

Link to comment
Share on other sites

next hooked up the duck

this is a success, i have hard wired the duck to another of the micro router USB ports, as shown below, it powered up and the duck and router worked when connecting to the computer

I had to increase the delay, to allow the micro router to connect and handshake....but as shown next, it executed a basic notepad payload...

next step, sort the USB stick

then try to connect the mouse board to the third micro USB port, and wrap everything in heat shrink and fit within the mouse...

more to come...

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...