Contaminated USB key infected Pentagon networks

A contaminated USB key was sufficient to infect Pentagon networks in 2008, according to a former member of the US Air Force. The vulnerability existed on American bases in Afghanistan, where pilots transported mission data on USB keys purchased from shops in Kabul.

USB keys provided entry to classified systems

The same devices passed from ordinary computers to classified systems and then to the aircraft themselves, providing entry points to military secrets. This created a risk that sensitive information could be accessed or compromised through these unsecured devices.

USB keys replaced CDs in data transfer

At the beginning of the 2000s, crews recorded flight information on CDs, which first passed through a non-classified post, then joined a classified system where military personnel completed the planning, and finally went on board the aircraft to guide the pilot and signal expected threats on the route. USB keys later replaced the discs, without changing this process.

Soldiers preferred local purchases over official suppliers

The issue remained the supply. Importing computer equipment from the United States required much more effort than a local purchase, so soldiers purchased from Afghan merchants, far from the official suppliers of the army. According to The Register, Justin Henkel negotiated lots of a hundred units. This specialist now heads the cybersecurity of the publisher SolarWinds.

Enemies exploited the vulnerability

The enemies of the United States quickly noticed the vulnerability and distributed infected USB keys to local dealers in the region. Henkel did try to alert his superiors, but the full details of his attempts were not disclosed.