Symptoms
- Found a USB drive with no clear owner
- Received one from an untrusted or unknown source
- Curiosity about what's on it outweighing caution
- Uncertain how to check it safely
Likely causes
- PossibleDrive intentionally left as a malware delivery method'USB drops' are a known tactic where infected drives are left in public places hoping someone plugs them in.
- CommonOrdinary lost drive with no malicious intentMany found drives are simply lost personal storage with nothing malicious on them.
What to do
- Don't plug an unknown USB drive into your primary computer, especially one containing personal or financial information.
- If you must check it, use a computer that isn't connected to important accounts or a network, ideally one set aside for this purpose.
- If available, use a device with strong, updated antivirus that can scan the drive automatically before opening any files.
- Never enable macros or run any executable file from an unknown drive.
- If a business or workplace context, hand the drive to IT rather than plugging it in yourself.
- If you plugged it in and now see unusual behavior, disconnect from the network and run a full malware scan immediately.
- When in doubt, the safest choice is simply not to plug it in at all.
When to call a pro
If a workplace device was affected, involve IT immediately rather than trying to fix it yourself.
Safety
Use caution
Do not plug an unknown USB drive into a computer with sensitive personal, financial, or work data; use an isolated device if you need to check it at all.