Question Modify adapter / USB stick for "hidden" connection ?

Oblivion77

Honorable
Jul 6, 2018
238
2
10,585
Dear all

When using a BLUETOOTH or CELLULAR or WIFI adapter / USB stick.

Is it then possible to modify the adapter / USB stick so that:

1.
The adapter / USB stick is hidden from Windows?
The adapter / USB stick doesn’t appear in Device Manager in Windows?

2.
The adapter / USB stick gives the computer “hidden” internet connection – while also there is no internet in Windows / in Windows the computer is offline?

3.
The adapter / USB stick gives the computer “hidden” Bluetooth connection – while also there is no Bluetooth connection in Windows?

4.
What level of skill is required?
Only the manufacturer?
NSA?
Someone trained / skilled?

5.
What would it require?
Some kind of malware on the USB stick?
Change the firmware?
Change the whole USB stick, circuit board etc.?

Thank you

Best regards
 

Misgar

Respectable
Mar 2, 2023
1,894
504
2,590
I'm not sure if this WiFi keylogger fits the bill, but it's probably visible in Device Manager if you have Admin rights.

https://www.keelog.com/keylogger/
keylogger_08a_10.jpg


Or there's this range of video loggers.

https://www.keelog.com/vga-hdmi-dvi-capture/

video_logger_03.jpg



No doubt there are many other questionable devices that can be connected to a PC, but technically savvy users might be able to spot an unusual device plugged into the back of a PC, even if they're unable to check Device Manager for suspicious hardware, or monitor internet/Wifi/Bluetooth connections.

It's easier to disguise things if the computer user does not have an Administrator's account, but instead is restricted to basic User functions and programs. This is common in larger companies and government offices, to stop unauthorised tinkering by employees.
 

punkncat

Polypheme
Ambassador
^ So far as I am aware any govn't office or contractor doing govn't work had to implement a program that will not allow USB sticks to operate several years ago. This was to help make inserting malware harder after a goof up on the IT level by a tech.

I am not sure whether you can be connected say to a wired connection and a wireless connection at the same time? Is it possible to run two adapters, as it were?
 

Misgar

Respectable
Mar 2, 2023
1,894
504
2,590
That's correct. I used encrypted USB hard disk drives at work with a special RFID token pressed against a USB dongle to unlock the drive and copy files between a secure computer and a LabVIEW test system. Without this option, the USB ports on the secure PC were locked out by the IT Dept.

For non government work, things can get more lax (insecure). It all depends on company policy.
 

USAFRet

Titan
Moderator
^ So far as I am aware any govn't office or contractor doing govn't work had to implement a program that will not allow USB sticks to operate several years ago. This was to help make inserting malware harder after a goof up on the IT level by a tech.
Remember...there are lots of "governments" on the planet, and not all of them quite so strict.
 

USAFRet

Titan
Moderator
I am not sure whether you can be connected say to a wired connection and a wireless connection at the same time? Is it possible to run two adapters, as it were?
In a similar thread a little while ago, I commented that I used to have an Eye-Fi SD card, for my cameras.

Regular SD card, with built in WiFi capabilities.
It was its own hotspot. The PC need not be connected to WiFi at all.

But that shows just how small a space is needed for some WiFi components.
 

Math Geek

Titan
Ambassador
the device will still need drivers to work so windows will have to "know" it is there to make it function.

probably possible to remove it from device manager but it would also have to hide from everything else as well. making a network connection will show it in that area, services would show there. task manager would show software running as well. and probably a few other places i'm not thinking of at the moment.

is it possible? probably, but not likely unless you a super tech geek. you'd have to build it yourself, program it, build drivers, get it to run in windows and then hide itself etc etc etc.

so not likely you'll see it on your home pc since you're probably not worth the effort :)
 
  • Like
Reactions: Oblivion77

Oblivion77

Honorable
Jul 6, 2018
238
2
10,585
the device will still need drivers to work so windows will have to "know" it is there to make it function.

probably possible to remove it from device manager but it would also have to hide from everything else as well. making a network connection will show it in that area, services would show there. task manager would show software running as well. and probably a few other places i'm not thinking of at the moment.

is it possible? probably, but not likely unless you a super tech geek. you'd have to build it yourself, program it, build drivers, get it to run in windows and then hide itself etc etc etc.

so not likely you'll see it on your home pc since you're probably not worth the effort :)
Thank you for your reply

1.
the device will still need drivers to work so windows will have to "know" it is there to make it function.
Can it work "around" Windows or by it self?

2.
making a network connection will show it in that area, services would show there
What do you mean?
 

Math Geek

Titan
Ambassador
there's no "working around windows" if its running in windows it is working with it. if it is run by itself then it is it's own OS and then windows isn't running. can't have both at the same time

if you look at Network and Internet settings, you'll see all network connections. wifi, ethernet, BT, VPN etc.

so making a new connection of any kind shows up in that area. if it uses a service or other process to run, then those will show up in task manager, services area and so on.
 

Oblivion77

Honorable
Jul 6, 2018
238
2
10,585
there's no "working around windows" if its running in windows it is working with it. if it is run by itself then it is it's own OS and then windows isn't running. can't have both at the same time
"can't have both at the same time"
What do you mean?
Two OS running at the same time?

so making a new connection of any kind shows up in that area. if it uses a service or other process to run, then those will show up in task manager, services area and so on.
But it could still just be assigned a bogus / "cover name" in Task Mananger, Services etc. - and stay hidden?

If somehow the USB stick had its own OS, then it could operate around Windows / without Windows?

Thank you