I don't think that would have protected against this attack. I think it was the ...

		Thorrez on Oct 13, 2024 \| parent \| context \| favorite \| on: Two never-before-seen tools, from same group, infe... I don't think that would have protected against this attack. I think it was the users' workflow to plug USB drives into non airgapped computers, then into the airgapped computers. So those USB drives would be put on the approved list, and also be used by the attackers.

I guess people forget that SneakerNet is still a network.