Most businesses spend real money protecting their email, their network, and their cloud accounts. Very few think twice about the charging cable an employee bought online and plugged into a work laptop.
That blind spot is exactly what attackers are counting on. At Kaseya's recent Cybersecurity Summit, ethical hacker Jamie Woodruff walked through a real incident in which a cheap charging cable was the entry point for repeated ransomware attacks against a UK company. It's a story every business owner should hear.
The $4 Cable That Kept Delivering Ransomware
According to Woodruff, a UK construction firm kept getting hit with ransomware. Every machine one particular employee used was eventually infected, even though his job was mostly CAD drawings and he wasn't doing anything obviously risky.
The culprit turned out to be the cable he used to charge his personal devices. It looked completely normal, but inside it hid:
- A SIM card, giving it its own connection to the internet, independent of the company's network and firewall
- A small logic chip that could download code from a remote server and run it on whatever computer the cable was plugged into
The cable still charged devices normally, so nothing seemed wrong. Woodruff also said it could be dialed remotely and used to listen to conversations within roughly 15 meters.
The employee had bought it late one night from Wish.com for about US$3.90 plus shipping. And it wasn't random bad luck: when investigators went back through six months of firewall logs, they found the criminal group had been running paid ads aimed specifically at that company's staff.
This Isn't a One-Off
Woodruff also showed an X-ray of a standard-looking Lightning cable with a Wi-Fi antenna and logic chip moulded into the plastic. He said cables like it have been listed by numerous sellers on low-cost marketplaces. Purpose-built "attack cables" are also sold openly as penetration-testing tools, so the technology is neither rare nor expensive.
The broader lesson: anything that plugs into a USB port is a potential way in. To a computer, a malicious cable can look like a keyboard, typing commands faster than any person could, and it never needs anyone to click a phishing link.
Why Most Security Policies Miss This
Ask most businesses what their bring-your-own-device (BYOD) policy covers and you'll hear about phones, laptops, and maybe personal email. Cables, chargers, USB hubs, and other accessories almost never make the list.
Meanwhile, employees bring their own cables to work every day. They charge phones, e-cigarettes, and headphones from their work laptops. And when a cable goes missing, the easiest fix is the cheapest one online.
How to Protect Your Business
The good news is that closing this gap is inexpensive and mostly a matter of policy:
Add accessories to your BYOD policy
Spell out that cables, chargers, and USB devices are covered, not just phones and laptops.
Buy only from approved vendors
Source cables and peripherals from reputable suppliers, and avoid bargain marketplaces for anything that connects to company equipment.
Supply the cables yourself
Issuing staff company-approved chargers and cables costs far less than a single incident and removes the temptation to bring their own.
Don't charge personal devices from work laptops
Use wall chargers instead, or USB data blockers that pass power but not data.
Control USB devices at the endpoint
Tools like Microsoft Intune and modern endpoint protection can restrict or alert on unknown USB devices, including "keyboards" that suddenly appear.
Make it part of security awareness training
Staff should know that a free, found, or suspiciously cheap cable is a risk, just like an unexpected email attachment.
Keep reliable, isolated backups
If something does get through, tested off-site backups are what turn a disaster into an inconvenience.
The Bottom Line
Attackers look for the path of least resistance. As email filtering and endpoint security get stronger, physical devices like charging cables become an attractive back door, especially when they cost just a few dollars and can be targeted at a specific company's employees through ads.
A few clear policies, approved hardware, and the right endpoint controls go a long way toward shutting that door.
Not sure whether your policies cover risks like this?
HyCloud's free security evaluation reviews your devices, policies, and endpoint protection, and gives you a plain-English plan to close the gaps.
