Brand New USB Stick and Virus / Risk

Grumpy_chap

Is it possible for a brand new USB stick to have a virus?

I ask because we made a purchase from Amazon a little while back and the delivery had an extra brand new San Disk USB stick in the box.  "Cruzer Blade 64GB USB Flash Drive"
We reported to Amazon but their processes got confused when we tried to process a return for an item we did not have.
It seemed entirely plausible that a USB stick would get dropped in the wrong package.  They are quite low value, so we just thought we had a "win".

We have since received two further deliveries with exactly the same USB stick included extra over the items ordered.  All seem to be absolutely brand new and fully sealed.

We are tempted to use these USB sticks but is there any way that a brand new and fully sealed USB stick could be corrupted in any way and a risk?

Neil_Jones

Plausible but highly doubtful.

Some USB sticks may have come with some bundled software which is probably about as much use as a chocolate teapot, and this may generate a false positive.

TadleyBaggie

Strange for Amazon to add "extras" to orders, especially multiple times. Is this actually Amazon or is it a marketplace seller?

Grumpy_chap

Amazon or "fulfilled by Amazon"

The first stick seemed a plausible mistake - small, low value item could easily get picked and dropped by mistake.

The second was odd but maybe a coincidence that a mistake happened twice.

Now it's three and really seems weird.

Vitor

For 64GB it's not worth the risk IMHO

Newcad

Some suppliers do include Freebies, especially with a first order but often with all orders above a certain value.

Pens and keyfobs are popular, but a USB stick freebie may not be unusual, particularly if you're ordering computer or tech stuff.
A USB2 64GB Cruzer Blade is about £7 on Amazon.
(It may also be a form of "brushing", which is about reviews see below).

If worried about any malware being on the stick (very rare particularly if still in the sealed packaging, but just possible) then go offline to prevent any connection, insert the stick and immediately reformat it, that will wipe any files off it.
Not totally foolproof if there's something on the stick that doesn't need a connection, nothing is, but if your computer is properly backed up then minimal risk, or use an old machine you don't care about much.

PS. I have also had totally unordered packages from Amazon.
That's a different thing, known as "brushing". If you get one then it's yours and Amazon don't want it back.
https://www.bbc.co.uk/news/technology-54055669
(Amazon do ask you to report it because a suplier sending unsolicited packages is against their terms).
https://www.amazon.co.uk/gp/help/customer/display.html?nodeId=G33XVXQPUV79Z2ZC

Neil_Jones

USB sticks are ideal for something like brushing if that is what's happened here, as they are dirt cheap (heck I remember paying best part of £20 for a 8Gb stick when that was considered massive)

But yes, report it as per the link above even if it was "fulfilled by Amazon" as that's just third party via a different method (as in Amazon do all the legwork and you the supplier just sends it to them)

Grumpy_chap

Thanks - I don't think this is about "brushing".
I do really think it was something just accidentally dropped in the incorrect package.
 - The first order was printer toner.
 - The second order was cabin bags for travel.
 - Third order was a wallet.
It is just, if the USB stick was accidentally dropped in the package, that is plausible.  Happening several times is odd.
I have not been asked for reviews for any of the items other than the standard automated Amazon request to give a star rating.  Having an extra USB stick is not going to make me give a higher rating than I would otherwise.

vacheron

First make absolutely sure it is a USB stick! 

There are PC's now the size of USB sticks which power up and intercept your keyboard to monitor (and execute) keystrokes, these have even been build into USB LEADS which look just like phone charger cables (Google "O.MG Cable" to scare yourself to death!)

These have been left on the ground ouside offices and placed in peoples' laptop bags in the hope an employee will pick it up and use it once inside because "it's just a usb sticl / cable / charging lead". 

Not saying this is the case, but good for everyone to be aware!

Newcad

If these were all from the same company then you could contact them to ask.

It could simply be that they have a large stock of old USB2 sticks that nobody is ordering because most would go for a USB3 version now.

So rather than bin them or having them taking up space then give them away.

alanrowell

If in doubt throw it out. They are dirt cheap so why stress yourself