BY NADEEM SARWAR/AUG. 18, 2022
One of the most powerful USB-based keystroke injection devices, the USB Rubbery Ducky, has received a major upgrade that makes it even more menacing. Touted as the device that pioneered the technique of keystroke injection years ago, the latest iteration of USB Rubber Ducky introduces the improved DuckyScript 3.0 programming language with a host of dangerous new tricks in tow.
So far, the attack vector had to be attuned to the specific OS and version, but thanks to DuckyScript 3.0, the USB device can now recognize the OS details on its own and accordingly deliver the payload script. That is made possible with the latest suite of upgrades to the DuckyScript programming language, which now offers the flexibility of writing "if this, then that" type of commands. Based on the device environment, the USB Rubber Ducky will identify the system properties and deliver the right script to do its job.
