Kaspersky warns of the danger of USB computer mouse simulators

Devices that imitate the operation of a mouse can be a vector of cyber threats targeting people who work remotely and their employers, Kaspersky experts warn.

USB simulator devices, which have become popular with the popularization of hybrid or remote working, can contain malicious software. Although these simulators may seem harmless and convenient at first, they can come from unknown sources and unverified manufacturers and pose a serious threat to computer security, potentially compromising the data of both the employee and the organization they work for.

Also known as “scrollers”, computer mouse simulators are physical devices that connect to the computer via a USB port and simulate the movement of the mouse on the screen. Their purpose is to create the impression that someone is working on the computer in order to prevent it from going into sleep mode, as well as to maintain the user’s “online” status on corporate communication networks.

Mouse simulator for sale on one of the popular sales platforms (translation of the text from the image: Mini USB mouse mover, undetectable… 146 units sold)

“USB mouse simulators and similar devices could become an entry point for cybercriminals who can use them to gain access to confidential information or disrupt corporate digital systems,” warns Mark Rivero, chief security researcher at Kaspersky. “Users should be careful about connecting unknown USB devices to their business computers, and companies and businesses should organize regular cyber security training courses for employees to be aware of potential threats.” It is also vital to have reliable endpoint protection on business devices that can detect and neutralize suspicious activity. These measures will help protect the company from possible attacks and maintain data security.”

In 2024, Kaspersky worldwide detected and blocked 3 billion threats detected on local devices – this includes both malware that spreads via removable USB drives, CDs and DVDs, as well as malware that arrives on the computer in an unopened form (for example, programs in complex installers, encrypted files, etc.).

To avoid this type of threats, including those transmitted via USB devices, follow the recommendations below.

Businesses and companies:

• Use solutions from the product line Kaspersky Next that provide real-time protection against online and offline threats for organizations of any size and industry;

• Consider increasing your employees’ digital literacy to minimize human-side cyber risks by using online tool which offers comprehensive cyber training for staff.

Individuals:

• Use a comprehensive security solution, such as Kaspersky Premiumto control and scan all your connected devices and prevent malware from accessing your computer;
• Ensure that all USB programs and tools you use are manufactured by well-known brands.