Cybersecurity researchers from Kaspersky have uncovered a sophisticated new piece of malware called TetrisPhantom seen compromising secure USB drives to steal sensitive information from government endpoints in the Asia-Pacific region.
Secure USB drives have an encrypted partition whose files can only be accessed with a password, and through specialized software, like the one called UTetris. This method is generally used to safely transfer data between systems, including air-gapped endpoints, BleepingComputer reports.