Tool
tool:o_mg_cable
Also: O.MG
Stealthy malicious USB cable containing an implant that can emulate a keyboard, inject keystrokes and mouse actions, log keystrokes, communicate over Wi-Fi, run payloads, and support other remote functions.
Stealthy malicious USB cable containing an implant that can emulate a keyboard, inject keystrokes and mouse actions, log keystrokes, communicate over Wi-Fi, run payloads, and support other remote functions.
“he came up with a name for this cable, the O.MG cable.”
“It acts exactly like a normal USB data cable”
“an attacker can remotely connect to it via Wi-Fi nearby”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DEVELOPED_BY | MG | Explicit | 161 |
| outgoing | USES | Keystroke injection | Explicit | 161 |
| outgoing | USES | mouse injection | Explicit | 161 |
| outgoing | USES | USB keylogging | Explicit | 161 |
| outgoing | USES | geofencing | Explicit | 161 |
| outgoing | USES | remote shell | Explicit | 161 |
| outgoing | USES | air-gapped computer access | Explicit | 161 |
| outgoing | USES | persistence via physically attached hardware | Explicit | 161 |
O.MG cable DEVELOPED_BY MG
MG describes designing and building the O.MG cable, including its PCB and features.
Explicit Confidence 99% · Jack Rhysider EP 161 Details
“So, he came up with a name for this cable, the O.MG cable”
“That took off. Then Defcon was coming up, August 2019”
O.MG cable USES Keystroke injection
The O.MG cable can emulate a keyboard and run keystroke-injection payloads.
Explicit Confidence 99% · MG EP 161 Details
“We already talked about keystroke injection payloads, emulating a keyboard”
O.MG cable USES mouse injection
The O.MG cable supports mouse injection for navigating and clicking on the host.
Explicit Confidence 99% · MG EP 161 Details
“added some mouse injection as well, so you can navigate a mouse around the screen”
O.MG cable USES USB keylogging
The O.MG cable can log keystrokes when placed between a keyboard and a computer.
Explicit Confidence 99% · MG EP 161 Details
“We added USB key-logging a while back”
O.MG cable USES geofencing
The O.MG cable supports geofencing and can trigger actions based on detected wireless networks.
Explicit Confidence 99% · MG EP 161 Details
“It can also do some autonomous things like geofencing and triggering things automatically based on wireless networks”
O.MG cable USES remote shell
The HIDX StealthLink feature can provide a remote shell on a target through a raw data link that appears as a keyboard to the host.
Explicit Confidence 99% · MG EP 161 Details
“you can have a remote shell running on the target that’s on a completely air-gapped machine”
O.MG cable USES air-gapped computer access
MG describes using the O.MG cable to gain access to an air-gapped evidence computer.
Explicit Confidence 99% · MG EP 161 Details
“Of course, the goal was get — to gain access to that evidence computer which was air-gapped”
O.MG cable USES persistence via physically attached hardware
In the red-team exercise, the physically attached cable served as persistence despite malware and operating-system cleanup controls.
Explicit Confidence 99% · MG EP 161 Details
“But since they had a cable attached physically at all times, that was the persistence”