USB Dongle Used to Steal Passwords

Rob Fuller demonstrated and explained how to exploit a USB SoC-based device to turn it into a credential-sniffer.

After modifying a USB dongle, Fuller said it would now installs and acts itself as the network gateway, DNS server, and Web Proxy Auto-discovery Protocol (WPAD) server for the victim's machine.

Here is how he did it:



Source: The Hacker News