Duplin sheriff warns residents about “found USB” scam that can install malware

Duplin County Sheriff Stratton Stokes is warning residents about a growing security threat known as the “found USB” scam, also referred to as a “plug-and-run” or “USB drop” attack.

Officials say scammers leave USB drives in public places such as parking lots, coffee shops, and libraries, hoping someone will plug them into a computer to identify the owner. Once connected, the devices can install malware or ransomware. In some cases, harmful USB drives have reportedly been mailed to individuals and made to appear as if they were sent by legitimate companies.

The sheriff’s office urges residents to never plug unknown USB drives into their computers. If one is found, it should be turned in to a legitimate authority such as library staff, security personnel, or law enforcement, or properly destroyed.

Sheriff Stokes also reminds residents that anyone who believes they may have been targeted or victimized by a scam should contact their local law enforcement agency immediately.