BEGIN:VCALENDAR
PRODID:-//vBulletin 6//EN
VERSION:2.0
CALSCALE:GREGORIAN
BEGIN:VEVENT
UID:d9bd992d-ea55-4742-a9af-870616df96b1
DTSTAMP:20260516T021801Z
SUMMARY:Sounds Legit: Why you shouldn't trust that speaker
DESCRIPTION:BadUSB devices are popular worldwide\, and almost no one ignore
 s their nature: an object with a USB connection (usually a pendrive) conne
 cts to a computer and tells it "I am a keyboard"\, proceeding to send ("ty
 pe") arbitrary commands\, usually malicious. In this talk we have decided 
 to go beyond the classic concept of a malicious pendrive. We use a set of 
 classic USB speakers from a well-known brand available worldwide\, which w
 e disassemble to add our own hardware modification. This modification\, wh
 ich consists of cheap parts that can be acquired worldwide\, makes this se
 t of speakers an unprecedented local and remote attack vector: a device th
 at looks and functions as a speaker\, but is capable of acting as a keyboa
 rd\, exfiltrate information\, and use a SIM card to receive remote command
 s by telephone to leak information. When connected\, the speaker passively
  waits for a phone call to its internal SIM from a specific number. Upon r
 eceiving it\, launches a payload against the computer to which it was conn
 ected\, allowing the attacker to obtain a shell. Now then\, what would hap
 pen if someone left this speaker in its original box in a corner of an off
 ice? What would happen if someone connected this innocent device to their 
 work terminal? Well\, it is a speaker after all. And it definitely sounds 
 legit...\n\nSpeaker(s): Luis Ángel Ramírez Mendoza (@larm182luis)\, Maur
 o Cáseres\n\nLocation: Red Team Vlg\n\nDiscord: https://discord.com/chann
 els/708208267699945503/726477357820411944\n\nEvent starts: 2020-08-08 21:3
 0 (09:30 PM) PDT (UTC -07:00)\n\nEvent ends: 2020-08-08 22:30 (10:30 PM) P
 DT (UTC -07:00)\n\nFor the most up-to-date information\, please either vis
 it https://info.defcon.org\, or use HackerTracker\, which is available for
  iOS and Android. This is an automated message\, and this data was last mo
 dified 2020-08-02T05:07 (UTC).
URL:https://forum.defcon.org/node/234330
DTSTART:20200809T053000Z
DTEND:20200809T063001Z
LOCATION:Red Team Vlg
END:VEVENT
END:VCALENDAR
