USB stick and CD-ROM based attacks are largely yesterday’s technology. Fake and infected PLCs, cables and devices are today's big technology threat. Can you trust seemingly safe and the usually well behaved keyboard, web cam, or even the chip? With BadUSB and BadBIOS, white-hat hackers crafted an intrusion that ultimately turned formerly benign peripherals like keyboards and webcams into highly programmable attack platforms that can't be detected by today's defenses. As reported by Eduard Kovacs for SecurityWeek (August 1, 2014), a drive can be reprogrammed to act as a network card and trigger attached machines or devices to connect to malicious sites disguised as trusted ones impacting, potentially, any type of thing that is USB enabled. BadUSB reprograms embedded firmware to alter the personality, so to speak, of any number and type of devices. From there, in the case of a hijacked keyboard under the sway of an infected USB drive, malicious instructions can be typed that tell a computer to turn off the lights, or open the flood gates. The standard defense is basically to police thumb drives. The usual remedy, as SecurityWeek reported, is to reinstall the operating system, which usually suffices in clearing otherwise baked-in malware. However, that tactic may fail with BadUSB because, according to Kovacs' article, the device may have rewritten the machine's BIOS by posing as a keyboard and unlocking a hidden file in the USB thumb drive. There are better ways to ward off and address such threats, as 3eTI will discuss. The session will present strategies and cases demonstrating designs and tactics that allow ICS operators to sleep a little easier.