Low-cost USB drives sold on major online marketplaces are frequently found to have falsified storage capacities and may contain malware, posing significant security risks to individuals and organizations.

Key Points

• Investigations revealed that half of the tested inexpensive USB drives displayed falsified storage capacities, with some holding less than 0.01% of the advertised memory.
• Fraudulent devices often use manipulated controller software to report fake capacities, leading to permanent data loss when users attempt to save files.
• A Nikkei investigation confirmed that the Japan Ground Self-Defense Force inadvertently used a malware-infected USB drive purchased through a major online retailer.
• Technical inspections of a 4-terabyte drive revealed it contained only a 64-gigabyte microSD card, highlighting the physical discrepancy between marketing and reality.
• Security experts warn that these devices can act as vectors for malware, potentially compromising isolated computer networks in hospitals, laboratories, and government facilities.

Why it Matters

These fraudulent products create a significant security vulnerability by allowing malware to bypass air-gapped systems and steal sensitive data from high-value targets. Consumers and organizations are advised to avoid unusually cheap hardware and source storage devices exclusively from established manufacturers through trusted retailers.