The Unknown USB Flash Drive I Refused to Plug In—It Might Have Saved My Computer (Part 3)
July 24, 2026
Com 0
By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.
The USB Safety Checklist I Follow Today
After that experience, I created a simple rule for myself.
If I don’t know where a USB device came from, I don’t connect it to my computer.
That one habit has stayed with me ever since.
Over the years, I’ve also shared the same advice with colleagues, friends, and clients.
Here is the checklist I follow whenever I encounter an unfamiliar USB flash drive.
✅ Never Assume an Unknown USB Drive Is Safe
Most unknown USB drives are probably harmless.
Someone may have genuinely lost them.
But cybersecurity is about reducing unnecessary risk—not making assumptions.
Treat an unknown USB drive the same way you would treat any unidentified item.
Until you know where it came from, be cautious.
✅ Don’t Let Curiosity Make the Decision
Attackers often rely on curiosity rather than technology.
Questions like:
“I wonder what’s on it?”
“Maybe I can help return it.”
“I’ll only plug it in for a minute.”
can lead people to take unnecessary risks.
Whenever curiosity starts making decisions, it’s a good time to pause.
✅ If It Belongs to Your Workplace, Follow Company Policy
Many organizations have procedures for handling unknown removable media.
Instead of plugging the device into your office computer:
Inform your IT department.
Hand it to security or reception.
Follow your organization’s security policy.
Those procedures exist for a reason.
✅ Keep Your Computer Updated
Security updates help protect computers against many known vulnerabilities.
Whether you use Windows, macOS, or Linux, keeping your operating system updated is an important part of your overall cybersecurity strategy.
✅ Back Up Important Files
Cybersecurity isn’t only about preventing attacks.
It’s also about recovering if something goes wrong.
Regular backups help protect your important documents, family photos, work files, and personal data.
A good backup strategy provides peace of mind regardless of the cause of data loss.
What If You’ve Already Plugged In an Unknown USB Drive?
If you’ve already connected an unfamiliar USB device, don’t panic.
The fact that you plugged it in does not automatically mean your computer has been compromised.
What happens next depends on many factors, including what actions were taken afterward.
For example:
Did you simply connect the drive and remove it?
Did you open files from it?
Did you install software?
Did you enable macros or grant permissions?
If you believe the device may have been suspicious, consider taking sensible precautions such as:
Disconnecting the USB device.
Running a reputable security scan.
Monitoring your computer for unusual behavior.
Contacting your organization’s IT team if it was a work computer.
Responding calmly and promptly is usually more effective than panicking.
Frequently Asked Questions
Are all unknown USB drives dangerous?
No.
Many are simply lost by their owners.
The point is not to assume every device is malicious.
The point is not to assume every device is safe.
A cautious approach helps reduce unnecessary risk.
What is USB baiting?
USB baiting is a social engineering technique where attackers rely on curiosity to encourage someone to connect an unknown USB device.
The attack focuses on influencing human behavior rather than forcing technical access.
Should I connect a found USB drive just to identify the owner?
In most situations, it’s safer to hand the device to the appropriate lost-and-found service, reception desk, or organization rather than connecting it to your own computer.
Can antivirus software solve every USB-related risk?
Antivirus software is an important layer of protection, but no single security tool can eliminate every possible risk.
Good cybersecurity combines technology with safe habits and informed decision-making.
The Biggest Lesson I Learned
When people hear the word “cybersecurity,” they often imagine hackers typing lines of code in dark rooms.
The reality is usually much simpler.
Many attacks begin with ordinary decisions made by ordinary people.
Opening an unexpected email.
Clicking an unfamiliar link.
Scanning a suspicious QR code.
Or plugging in an unknown USB flash drive.
Technology matters.
But our decisions matter just as much.
The strongest security software in the world cannot replace good judgment.
Final Thoughts
The mysterious USB flash drive I found never revealed its story.
Perhaps someone genuinely lost it.
Perhaps it contained nothing more than family photographs or university assignments.
I’ll probably never know.
And honestly…
I’m comfortable with that.
Because cybersecurity isn’t about satisfying curiosity.
It’s about protecting what matters.
The next time you find an unknown USB flash drive in a parking lot, airport, conference room, classroom, or office, remember this story.
Pause for a moment.
Ask yourself one simple question:
“Is satisfying my curiosity worth risking my personal information or my computer?”
Most of the time, the safest answer is obvious.
Leave curiosity behind.
Choose security instead.
That one decision could protect not only your computer—but also your personal information, your work, and your peace of mind.
About the Author
Jackson Godwin is a Cybersecurity Consultant specializing in Vulnerability Assessment and Penetration Testing (VAPT), Governance, Risk and Compliance (GRC), ISO/IEC 27001, PCI DSS, Cloud Security, AI Security, and Digital Risk Management.
With years of experience helping organizations identify vulnerabilities and strengthen their cybersecurity posture, Jackson is passionate about transforming complex cybersecurity topics into practical advice that is easily understood by anyone.
Through JacksonTechnology.com.ng, he publishes cybersecurity awareness stories, ethical hacking tutorials, cloud security insights, compliance guides, AI security resources, and practical online safety tips to help individuals and businesses stay ahead of evolving cyber threats.
His mission is simple:
To educate, empower, and inspire safer digital habits—one cybersecurity story at a time.
