I wouldn’t give this cable to my worst enemy - O.MG Cable

The Rubber Ducky? Basic. The Flipper Zero? Child’s play. This is the O.MG Cable, a stealthy, powerful hacking tool that allows the attacker to log your keystrokes, access your device, and emulate both keyboard and mouse movements. It's priced accessibly for the average consumer, and could be used to juice jack your phone or laptop. How do you protect yourself from such a device?

Big thanks to the following creators for their code:

Purchases made through some store links may provide some compensation to Linus Media Group.

FOLLOW US
---------------------------------------------------  

MUSIC CREDIT
---------------------------------------------------
Intro: Laszlo - Supernova

Outro: Approaching Nirvana - Sugar High

CHAPTERS
---------------------------------------------------
0:00 Intro and Features
3:43 Data Infiltration and Exfiltration
4:45 Getting around passwords
5:56 Extended Data Exfiltration
6:57 Self Destruction
7:51 DANGER! (Protect Yourself)
10:15 Why is this allowed?
11:46 Conclusion

[PinkDreemurr]

At this point im 99% convinced these security videos are the LTT equivalent of security awareness training after the hack.

[mrgallbladder]

To be fair, flipper zero already looks like a happy meal toy.

[RuiSilva]

Mike created the perfect ecosystem.
1. Create the problem
2. Create the solution
3. Profit

[jediguy]

As someone who works in a large company IT department. Mike has a good point, most cyber criminals don't need to go through that kind of hassle. Its staggering at the amount of people (who swear they didnt click anything) get their work computers infected that i have to pull, wipe, and re-image. Our company cyber security team also sends out test phishing emails randomly and it always catches people.

[jack.smith]

As someone who recently sat awake all night, naked, trying to log someone else out of their YouTube account, I'm sure Linus loves that this tool exists.

[one_of_a_duo]

Would be somewhat tempted to plant a cable that just opens notepad and warns against using random cables if not for the price.

[wisteela]

I love that he had to create a device to detect his own cables.

[ErikTheAndroid]

Security is one of the few fields where "spreading awareness" is actually a valid and worthwhile thing. These attacks exist whether we like it or not, so it is better to know about them so we can defend against them.

[yusinwu]

"We'd better off learn about now while it's expensive, then later when it's cheap and it's too late."
Well said, so well said

[cheeseisgreat]

I feel like $100 per cable is already incredibly cheap for someone looking for a big payday by infiltrating some organization

[hehebruh]

Mike creating a problem and also providing a solution is a genius way to sell stuff

[JigglypuffTutorials]

Can totally see in a few years amazon or ali express being full of cables like
this if these exploits aren’t taken care of. Maybe O.M.G is doing the right thing.

[ScorelessPine]

I almost worry that people are going to try and slip these into things like Ebay or Amazon listings or returns, they look good enough to be official and nobody would think twice about using the charging cable that came in the box with their new phone.

[LaczPro]

Man, the ending about those getting cheaper, that gives the chills.

Love to see security content like this on the channel. It's way more important than people think it is.

[asj]

The NSA apparently had these back in 2008 (according to the ANT catalog leaked in 2013). COTTONMOUTH-I was a device that could load malware and act as a wireless bridge (for subverting airgaps) while being disguised as a regular USB cable connector. The price for making these things must have a dropped a bit, since the listed unit price was 20 300 USD.

[levylok]

Thank you for teaching us about things like this! I'm a computer salesman, and a lot of people come to me with cybersecurity and ask for my knowledge. So when it comes to things like these, you said it first, it's better know about it as early as possible to prevent people of having these encounters.
Have a nice day
Levy

[bobthebuilder]

2:43 I appriciate the editor using different TF2 payloads as a way to show it can carry multiple.

[Neavris]

The name of the NSA implant this is inspired from is called COTTONMOUTH. A USB cable with wifi remote control in the type-A end. It was in the TAO catalog released in late 2013 iir.

[Neoxon]

And that’s why I always carry my own cables. If anything, this video couldn’t be timed better since I’m headed downtown for the day & had to pack some chargers.

[JamesTM]

My biggest worry about these is how easy it is to inject fake or knock-off items into Amazon's listings or inventory. It's entirely plausible that an attacker could mock up a few of these to look like some reputable brand and then sell them on Amazon to unsuspecting people. I've gotten fake stuff from "Ships and Sold by Amazon" listings, so it's not just a matter of avoiding dodgy listings.

Too expensive to be worth it now? Probably. But that won't last long.