An unknown USB drive: why not plug it in?

You find a USB key on the ground, in a parking lot, in a waiting room, or you receive one for free in the mail or at an event. Curiosity is natural: what’s on it? And if you just plugged it in to see? ABSOLUTELY NOT. Plugging in an unknown USB key into your computer is one of the riskiest actions in terms of security: a found or received key may be RIGGED, designed to infect your device, steal your data, or worse, the moment you plug it in. This isn’t paranoia: it’s a well-known attack technique that exploits our curiosity. The rule is simple: you NEVER plug in a USB key whose origin you don’t know. Let’s see why it’s so dangerous, how the trap works, and the good reflexes to adopt.

Why an unknown USB key is dangerous

An unknown USB key can be a weapon; let’s understand the danger. The PRINCIPLE of the danger: a USB key found or received from an unknown source may be RIGGED; designed to harm as soon as you plug it in; it’s not just an innocuous storage medium; it’s a potential attack vector; absolute caution. The POSSIBLE TRAP: a key can contain malicious software that activates when plugged in (or when a file is opened); viruses, spyware, ransomware; infection is the main risk; the danger is hidden. DATA THEFT: a rigged key can steal your data, your passwords, spy on your device; your information is at stake; the attack targets your data; a concrete risk. Keys that are outright DESTRUCTIVE: rarer but real; some rigged keys can physically damage the device (overvoltage); the danger goes as far as the hardware; a key can « fry » a computer; the extreme of the risk. The ATTACK by CURIOSITY: it’s a known technique; rigged keys are « abandoned » (parking lot, lobby, mail) counting on people’s CURIOSITY to plug them in; the trap exploits our nature; we fall for it out of curiosity (we’ll come back to this). Sometimes, PLUGGING IN is enough: the danger can be triggered as soon as you PLUG IN, even before opening a file; you can’t « just look » without risk; the simple act of plugging in is the dangerous action; don’t plug it in. A « FREE » key too: a key received for free (unsolicited mail, « gift, » trade show) can also be rigged; the unknown origin is the problem, not just the « found » key; be wary of unsolicited keys. This isn’t PARANOIA: this threat is real and documented (proven attack technique); it’s not a fantasy; companies train their employees on this risk; take it seriously. The TRAP of « just seeing »: the temptation to plug in « just to see what’s on it » (or to find the owner) is precisely what puts you in danger; resist this urge; curiosity is the trap. The SIMPLE RULE: you NEVER plug in a USB key whose origin you don’t know; this simple rule protects you from everything; no exceptions; remember it (we’ll come back to this). What’s the POINT of understanding: realizing that an unknown key can harm you as soon as you plug it in, and that the trap exploits curiosity, helps resist the temptation to plug it in; awareness of the danger foils the trap. The main idea: plugging in a USB key whose origin you don’t know (found on the ground, received for free, unsolicited) is a VERY dangerous action: such a key can be RIGGED, designed to infect your device (viruses, spyware, ransomware), steal your data, or even physically damage the hardware—and potentially AS SOON AS YOU PLUG IT IN, even before you open a file. This isn’t paranoia: it’s a well-known and documented attack technique that « abandons » rigged keys (in a parking lot, in a lobby, by mail) counting on people’s CURIOSITY to plug them in. The trap « I’m just plugging it in to see » (or « to find the owner ») is precisely what puts you in danger. The rule is simple and without exception: you NEVER plug in a USB key of unknown origin. Understanding that the danger is triggered as soon as you plug it in and exploits curiosity is the key to resisting the temptation.

How the trap works and the good reflexes

Here’s how this attack works and the good reflexes to protect yourself. The « BAIT » attack: the principle; rigged keys are left in busy places (parking lot, lobby, waiting room) or sent for free; the attacker counts on curiosity for people to plug them in; the bait is the key, the trap is your curiosity. CURIOSITY exploited: we are naturally curious (« what’s on it? ») or well-intentioned (« I’ll find the owner »); these reflexes push us to plug it in; the attack relies on this; it’s human, but dangerous; beware of your good intentions here. Triggered BY PLUGGING IN: the malicious code can run as soon as you plug it in (the key can pretend to be a keyboard, execute commands) or when opening an enticing file; the danger is immediate; you have no control once plugged in. The GOLDEN RULE—don’t plug it in: the absolute reflex; NEVER plug in a USB key of unknown origin, no matter the temptation; an unplugged key can’t harm you; abstention is total protection; it’s as simple as that (we’ll come back to this). Don’t give in to CURIOSITY: resist the urge to « see what’s on it »; that’s exactly the trap; curiosity is your weak point that the attack targets; master it; don’t plug it in. Don’t want to FIND the owner this way: the intention to find the owner (by opening the key) is commendable but dangerous; don’t plug it in for this; if you find a key, give it to lost and found/a responsible person; don’t open it yourself. Be wary of « GIFT » keys: be wary of keys received for free, unsolicited (mail, trade show, « free »); the unknown origin remains the danger; a « gift » can be a trap; don’t plug it in without certainty. THROW AWAY or return the key: when faced with an unknown key; don’t plug it in, return it (lost and found, responsible person) or throw it away; don’t keep it for « using it later »; get rid of the danger; don’t give in. In a COMPANY, report it: at work, if you find an unknown key, don’t plug it in and REPORT it to the IT department; companies are targets; follow the security guidelines; alert the responsible parties. The case of a key FOR SINGLE USE that’s suspicious: even a key that seems to come from a « semi-known » source but that you’re not sure about; in doubt, don’t plug it in; the slightest uncertainty about the origin requires abstention; uncertainty = danger. RAISE AWARENESS among your entourage: talk about this risk to your loved ones (family, colleagues); many people don’t know and would plug it in out of curiosity; awareness protects; share the simple rule. In summary, the trap works by « BAIT » (rigged keys abandoned or offered, counting on your CURIOSITY to plug them in), and the danger can be triggered as soon as you PLUG IT IN. The good reflexes: you NEVER plug in a USB key of unknown origin (the absolute golden rule), don’t give in to curiosity (« see what’s on it ») or the urge to « find the owner » (instead, return the key to lost and found or to a responsible person), also be wary of unsolicited « gift » keys, throw away or return any unknown key (don’t keep it), report to the IT department at work, abstain at the slightest doubt about the origin, and raise awareness among your entourage. The rule is simple: if you’re in doubt about the origin, don’t plug it in.

The golden rule, simple and absolute: you NEVER plug in a USB key whose origin you don’t know. Faced with this risk, you don’t need technical knowledge or long explanations: one simple, exception-free rule protects you completely. Here it is: NEVER PLUG IN a USB key whose origin you don’t know. Period. This rule is powerful in its simplicity: a USB key that you don’t plug in can absolutely do nothing to you—no infection, no theft, no damage. All the danger lies in the act of plugging it in; abstaining from this act protects you 100%. You still need to know how to resist what pushes you to plug it in, because the attack is precisely designed to exploit two very human reflexes. The first: CURIOSITY. Finding a USB key naturally arouses the desire to know what’s on it—photos? documents? maybe something interesting? That’s exactly what the attacker who « abandoned » the key is counting on: they know that a good part of people won’t resist the urge to plug it in « just to see. » This « just to see » is precisely the trap: there is no « just look » without risk, because the danger can be triggered as soon as you plug it in. So resist your curiosity: no found key is worth risking your device and your data. The second exploited reflex, more insidious because it comes from a good intention: the desire to FIND THE OWNER. You think « this person lost their key, I’ll open it to see who it belongs to and return it to them. » The intention is commendable, but the act is just as dangerous: plugging in the key to « identify the owner » exposes you to exactly the same risk. Don’t fall into this trap of good deeds: if you find a key, the right action is NOT to open it, but to give it to lost and found, to a responsible person at the location, or (at work) to the IT department—they, if they deem it useful and with the necessary precautions, can take care of it. You, you don’t plug it in. The same rule applies to keys RECEIVED FOR FREE and unsolicited: a key that arrives in unsolicited mail, offered by a stranger, or distributed in a suspicious context, is just as suspect as a found key—the unknown origin is the real criterion of danger, not just the fact that it was « found. » When faced with any key whose origin and content you can’t guarantee, apply the rule: don’t plug it in, and throw away or return the key. To memorize and share this rule, think of the analogy: an unknown USB key is like food found on the ground or a medication without a label offered by a stranger—you don’t put it in your body « just to see. » Similarly, you don’t plug an unknown key into your computer. This simple rule, « unknown origin = don’t plug it in, » is your absolute protection: it requires no expertise, just the discipline to resist curiosity and false good intentions. Engrave it in your mind and share it around you: many people are unaware of this danger and would plug it in without hesitation.

Good practices and special cases

Beyond the golden rule, here are some good practices and special cases to know. Only use YOUR OWN keys: for your uses, only use your own USB keys (bought new) or those from perfectly reliable sources; don’t plug in other people’s keys without certainty; control what you plug in; stay in the known. BUY new and reliable: buy your USB keys new, from serious brands, from trusted sellers; avoid used keys or those from suspicious sources; a new and reliable key is safe; invest in safety. Be wary of SHARED keys: even a key that has been passed around (loaned, passed from hand to hand) may have been infected along the way; be wary of shared keys of uncertain origin; sharing spreads infections; be careful with keys that circulate. PREFER online sharing: to exchange files, prefer online means (cloud, secure sending) to physical USB keys; you thus avoid the risks of keys; the digital avoids physical handling; a safer alternative. An UP-TO-DATE antivirus: keep an antivirus/protection up to date; it can detect a threat on a key (but don’t count on it for an unknown key: better not to plug it in); protection helps, abstention protects better; combine. The case of a TRUSTED key: a key whose origin you know perfectly (yours, that of a trusted close person whose you’re sure) can be used normally; the danger concerns the UNKNOWN origin; distinguish known and unknown; trust in the origin is the criterion. In case of PLUGGING IN by MISTAKE: if you plugged in an unknown key by mistake; unplug it, don’t open it, have your device analyzed (antivirus), monitor any abnormal behavior; react quickly (we’ll come back to this); it’s not too late to limit. PUBLIC USB charging stations: also be careful with public USB charging stations (airport, train station); plugging in your phone on an unknown public USB port can present a risk; prefer your own charger on an electrical outlet; the USB risk goes beyond keys. RAISE AWARENESS at work: companies are targets of these attacks (keys abandoned in parking lots); follow the security guidelines, report any found key to the IT department; never plug it in; the professional context is sensitive; follow the rules. EDUCATE your loved ones: explain this risk to your entourage (children, less tech-savvy loved ones); the rule « don’t plug in an unknown key » is simple to share; awareness protects the family; share the reflex. In summary, good practices: only use your own keys (bought new, from reliable brands) or those from perfectly safe sources, be wary of shared keys of uncertain origin, prefer online sharing (cloud) to physical keys, keep an antivirus up to date (without counting on it for an unknown key), and clearly distinguish a TRUSTED key (usable) from a key of UNKNOWN origin (never to be plugged in). Also be careful with public USB charging stations (prefer your charger on an electrical outlet). At work, follow the guidelines and report any found key. Educate your loved ones. And if you plugged in an unknown key by mistake, react quickly (unplug, analyze, monitor). These practices complement the golden rule; only using known and reliable, and favoring online sharing, are the key habits.

Warning: the danger can be triggered as soon as you plug it in (no need to open a file)—and if you plugged in an unknown key by mistake, react quickly. Two essential points to understand and manage this risk. The first destroys a dangerous misconception: many people think they can plug in an unknown key « without risk as long as they don’t open any file »—just to « see what’s on it » in the file explorer. THAT’S FALSE, and it’s a trap. The danger of a rigged USB key can be triggered AS SOON AS YOU PLUG IT IN, even before you open any file. How? A malicious key can be designed to automatically run code when plugged in, or even pretend to be another type of device (for example, a keyboard) and « type » malicious commands on your computer at lightning speed, without you having done anything. Some rigged keys act in a fraction of a second after insertion. There is therefore NO « just look » or « glance without risk »: the simple act of plugging in the key is already the dangerous action. That’s why the rule is to NEVER plug in an unknown key, and not « to plug in but not open anything »—this latter approach fully exposes you. Remember well: you can’t « examine carefully » an unknown key by plugging it in, because the act of plugging it in puts you in danger. The only possible caution is not to plug it in at all. The second point: how to REACT if you plugged in an unknown key by mistake (out of curiosity, by reflex, or before knowing this risk). Don’t panic, but act methodically. First, UNPLUG the key without opening any file on it: remove it from the computer. Then, stay VIGILANT and monitor your device: watch for any abnormal behavior (sudden slowdowns, windows opening on their own, strange activity, unusual requests, strange messages). Run a COMPLETE ANTIVIRUS ANALYSIS of your device: an up-to-date antivirus can detect and neutralize a potential threat (even if, for the most sophisticated attacks, it doesn’t detect everything—that’s why it’s important not to plug it in in the first place). As a precaution, change your IMPORTANT PASSWORDS (especially if you entered credentials while the key was plugged in, or if you notice anything unusual), particularly that of your email account; and monitor your accounts. If you notice clear signs of compromise, or if the device contains sensitive data, consider having the device checked by a professional, or even resetting it in serious cases. At work, IMMEDIATELY REPORT the incident to the IT department: don’t hide it out of embarrassment, because a quick reaction limits the damage for you and for the organization. Don’t feel guilty: this attack exploits a human reflex, and the important thing is to react quickly. Finally, learn from this for the future: from now on, apply the golden rule without exception. In summary: understand that plugging in an unknown key is dangerous IN ITSELF (the danger can be triggered as soon as you plug it in, without opening a file—there is no « just look » without risk), hence the rule of never plugging it in; and if you did it by mistake, react quickly (unplug, monitor, analyze with an antivirus, change your important passwords as a precaution, report to the IT department at work). Prevention (not plugging it in) is infinitely preferable to reaction: but if the damage is done, a quick and methodical reaction limits the consequences.

Frequent questions

Is it really risky, or is it paranoia?

It’s a real and documented risk, not PARANOIA: the attack by rigged USB key is a known technique, to the point that companies train their employees never to plug in an unknown key. Let’s see. A REAL RISK: the threat of rigged USB keys is real and documented; it’s not a specialist’s fantasy; attacks by this means actually happen; take it seriously; the danger exists. A KNOWN TECHNIQUE: the « abandoned key » attack (leaving rigged keys for curious people to plug them in) is a well-known and used attack technique; it has a name and real cases; security specialists document it; it’s established. COMPANIES protect themselves: proof of seriousness; companies TRAIN their employees never to plug in an unknown key, and sometimes test their vigilance; if organizations actively protect themselves, it’s because the risk is real; follow their example. It’s NOT just theoretical: concrete cases of infection, data theft via rigged keys exist; it’s not just « possible in theory »; it happens; don’t dismiss it with a wave of the hand. The RISK/EFFORT ratio: even if not all found keys are rigged, the potential risk (infection, theft, damage) is SERIOUS, and the effort to avoid it is NONE (not plugging it in); the calculation clearly favors caution; why take the risk? CURIOSITY, a real lever: the attack works precisely because many people plug it in out of curiosity (studies show this); it’s not paranoid to resist this reflex; it’s lucid; curiosity is a real weak point exploited. PROPORTIONATE prudence: applying the rule « don’t plug in an unknown key » is not excessive paranoia; it’s simple and proportionate prudence to a real risk; we’re not talking about depriving yourself, just not plugging in just anything; it’s reasonable. Compared to other PRUDENCES: just as you don’t eat food found on the ground, you don’t plug in a found key; it’s the same common sense applied to the digital; a natural prudence, not paranoia; the analogy enlightens. DON’T fear everything: it’s not about living in fear of USB keys in general (your own reliable keys are safe); just don’t plug in those of UNKNOWN ORIGIN; the prudence is targeted; keep a sense of measure. The ADVICE: it’s a real and documented risk (not paranoia); companies train for this danger, and the attack exploits curiosity; apply the simple and proportionate prudence of never plugging in an unknown key; it’s common sense, not fear. In summary, it’s a well REAL and DOCUMENTED risk, not paranoia. The « abandoned » rigged USB key attack (depositing keys in busy places for curious people to plug them in) is a known attack technique, with a precise name, and concrete cases of infection and data theft. The best proof of its seriousness: COMPANIES actively train their employees to never plug in an unknown key, and sometimes test their vigilance by « seeding » keys themselves to see how many will be plugged in (the results show that a significant portion of people give in to curiosity—that’s precisely what makes the attack effective). If organizations invest in this prevention, it’s because the danger is nothing theoretical. The calculation is simple: even if not all found keys are rigged, the potential risk is SERIOUS (infection, data theft, hardware damage) while the effort to avoid it is NONE (you just have to not plug it in). Applying the rule « you never plug in an unknown key » is therefore not excessive paranoia, but simple and proportionate prudence to a real risk—exactly like you don’t eat food found on the ground. It’s not about fearing USB keys in general (your own keys, bought new and reliable, are perfectly safe and can be used normally) or living in fear: just don’t plug in those whose origin is unknown. It’s digital common sense, not irrational fear.

I found a USB key, how to find its owner without risk?

Don’t plug it in yourself to identify it (that’s the trap): give it to lost and found, to a responsible person at the location where you found it, or to the IT department if it’s at work. Let’s detail. The TRAP of good intentions: wanting to find the owner by OPENING the key is a commendable but dangerous intention; plugging in the key to « see who it belongs to » exposes you to exactly the same risk; the attack also counts on this good will; don’t fall into this trap. DON’T plug it in: the rule remains absolute; even to « find the owner, » don’t PLUG IN the key; the danger is the same; the right action is not to open it; abstain. GIVE IT to lost and found: the right reflex; give the key to the lost and found of the location (store, train station, establishment) where you found it; the owner can claim it there; you do a service WITHOUT putting yourself in danger; it’s the right approach. Give it to a RESPONSIBLE person: give it to a responsible person, a reception, the staff of the location; they will handle it (or dispose of it); you transmit without plugging it in; let others decide. At WORK, the IT department: if it’s at work, give the key to the IT DEPARTMENT; they have the means (if they deem it useful) to examine it safely, or they will dispose of it; never plug it in yourself; it’s their role. Otherwise, THROW IT AWAY: if you can’t give it to someone and keeping an unknown key exposes you (temptation to plug it in one day); throw it away; an unknown key isn’t worth the risk; don’t keep it « just in case »; get rid of it. The owner will GET OVER IT: the owner of a lost key would surely prefer not to recover it rather than you infect your device; their lost key isn’t your responsibility to the point of putting yourself in danger; don’t feel obliged. COMMON SENSE: helping is commendable, but not at the price of your security; the right help is to transmit the key to someone who can handle it, not to plug it in; reconcile good will and prudence; one doesn’t prevent the other. Don’t KEEP it for « later »: don’t keep the unknown key to examine it later or reuse it; the temptation to plug it in would come back; eliminate the danger right away; don’t leave it lying around. RAISE AWARENESS: explain to your entourage that « finding the owner » is NOT a reason to plug in an unknown key; it’s a common trap; share this reflex; many people don’t know. The ADVICE: to help without risk, never plug in the key yourself; give it to lost and found, to a responsible person at the location, or to the IT department at work; otherwise, throw it away; help passes through transmission, not through plugging in. In summary, if you find a USB key and want to help its owner, the crucial point is to NEVER plug it in yourself to identify it: that’s precisely the trap that the attack exploits (the commendable desire to « find the owner » exposes you to exactly the same danger as curiosity). The right action, which reconciles good will and prudence, is to TRANSMIT the key to someone capable of handling it: give it to the LOST AND FOUND of the location where you found it (the owner can claim it there), to a RESPONSIBLE person or to the reception of the place, or—if it’s at work—to the IT DEPARTMENT (who have the means to examine it safely if they deem it useful, or will dispose of it). If you can’t give it to anyone, the wisest thing is to THROW IT AWAY: don’t keep it « for later » or « just in case, » because the temptation to plug it in one day would come back. Tell yourself that the owner of a lost key would very likely prefer never to recover it rather than see you infect your device: their lost key isn’t worth you taking this risk. Helping is commendable, but never at the price of your own security—and the real help, here, consists in transmitting the key to someone who can process it, not in plugging it in yourself. Finally, think about sharing this reflex with others, because many people don’t know that « finding the owner » is precisely one of the pretexts on which this attack counts.

And public USB charging stations, are they risky?

They can present a risk (an unknown public USB port could be rigged): for caution, prefer your own charger plugged into a power outlet. Let’s nuance. The RISK of public USB ports: plugging in your phone into an UNKNOWN PUBLIC USB port (charging station at a train station, airport, public place) can present a theoretical risk; a rigged port could try to access your device or inject something via the data cable; the USB port carries both data and electricity. The PRINCIPLE of the DANGER: a USB cable/port doesn’t just charge; it can also exchange DATA; a malicious port could exploit this data connection; that’s where the risk lies; USB charging isn’t just electricity. A LESS COMMON risk: this risk is real but less frequent/easy than that of rigged keys; modern devices often protect themselves (ask for authorization before data exchange); but caution is still necessary; don’t neglect it completely. The SIMPLE SOLUTION—its ELECTRICAL OUTLET: the safest is to use YOUR OWN charger plugged into a CLASSIC ELECTRICAL OUTLET (not a public USB port); the electrical outlet only carries electricity, no data risk; prioritize it. An EXTERNAL BATTERY: bringing an external battery (that you charge at home) avoids depending on public stations; you charge your phone safely; a practical solution when traveling; anticipate. Your own CABLE and charger: use your own cable and charger as much as possible; avoid unknown cables left on the stations (a cable can also be rigged); control your equipment; the known is safe. Refuse DATA EXCHANGE: if you must use an unknown USB port, and your phone asks « trust this device? » or offers data exchange; REFUSE (charge only); never authorize data access from an unknown port; refuse the data connection. DATA BLOCKERS: there are small adapters (« USB data blockers ») that only allow electricity to pass, not data; for those who often use public stations; dedicated protection; to consider. A risk TO KNOW: without panicking, knowing this risk allows you to take the right habits (your outlet, your battery); it’s simple caution when traveling; adopt it; awareness is enough to protect yourself. The ADVICE: for caution, prefer your own charger on an electrical outlet, or an external battery, rather than an unknown public USB port; if you must use a public port, refuse any data exchange (charge only), or use a data blocker. In summary, yes, public USB charging stations can present a risk, even if it’s less common than that of rigged USB keys. The principle of the danger: a port (or a cable) USB doesn’t just carry electricity, it can also exchange DATA; a malicious public port could therefore theoretically try to access your device or inject something via this data connection. Modern devices often protect themselves (they ask for your authorization before any data exchange), but caution is still necessary. The simplest and safest solution is to prefer YOUR OWN CHARGER plugged into a CLASSIC ELECTRICAL OUTLET (which, it, only carries electricity, with no data risk) rather than a public USB port. When traveling, bringing an EXTERNAL BATTERY (charged at home in advance) is an excellent habit that makes you independent of public stations. Also use your own cable and charger, rather than unknown cables left on the stations (a cable can also be rigged). If you really must use an unknown USB port and your phone asks you to « trust this device » or offers a data exchange, REFUSE (stick to charging). For those who frequently use public stations, there are small « USB data blockers » adapters that only allow electricity to pass. Without giving in to panic, knowing this risk allows you to adopt the right habits when traveling: prioritizing your electrical outlet and your external battery is a simple caution that keeps you safe.

What to remember

Plugging in a USB key whose origin you don’t know—found on the ground, received for free, unsolicited—is one of the riskiest actions in terms of digital security. Such a key can be RIGGED, designed to infect your device (viruses, spyware, ransomware), steal your data, or even physically damage the hardware—and the danger can be triggered AS SOON AS YOU PLUG IT IN, even before you open any file. This isn’t paranoia: it’s a well-known and documented attack technique, to the point that companies train their employees on this risk. This « BAIT » attack deliberately abandons rigged keys in busy places (parking lot, lobby, waiting room) or distributes them, counting on people’s CURIOSITY to plug them in. The GOLDEN RULE, simple and absolute, protects you completely: you NEVER plug in a USB key of unknown origin. A key that you don’t plug in can absolutely do nothing. You still need to resist the two reflexes that the attack exploits: CURIOSITY (« just see what’s on it »—but there is no « just look » without risk, because the danger is triggered by plugging in), and the commendable desire to FIND THE OWNER (plugging it in to « identify who it belongs to » exposes you just as much). When faced with a found key, the right action is never to plug it in, but to GIVE IT to lost and found, to a responsible person at the location, or to the IT department at work (otherwise, to throw it away); don’t keep it « for later. » The same caution applies to keys received for free and unsolicited: the unknown origin is the real criterion of danger. For your uses, only use your own keys (bought new, from reliable brands) or those from perfectly safe sources; prefer online sharing (cloud) to physical keys; and keep an antivirus up to date (without counting on it for an unknown key: abstention protects better). Extend this caution to PUBLIC USB CHARGING STATIONS (an unknown USB port can present a risk): prefer your own charger on an electrical outlet, or an external battery. And if you plugged in an unknown key by MISTAKE, don’t panic but react quickly: unplug it, monitor your device, run an antivirus analysis, change your important passwords as a precaution (especially that of your email account), and report the incident to the IT department at work. In short, remember this simple and exception-free rule— »unknown origin = don’t plug it in »—comparable to the common sense that makes us avoid food found on the ground. It requires no technical skills, just the discipline to resist curiosity and false good intentions. Engrave it in your mind and share it with others: many people are unaware of this danger and would plug it in without hesitation. This small reflex of caution protects you from a very real threat, with minimal effort.