28

Found this device outside an elementary school, trying to identify and return to owner.

When it is plugged into a Mac (because I'm straight crazy) it prompts a new unknown keyboard dialogue.

Item is plastic, blue in color, and roughly key-shaped. The narrow end of it is a small USB dongle that has an orange 'tongue' inside. I am not sure what orange color designates on USB.

Text on the sides of the metal:

Back side:

  • CAN ICES-3(B)/NMB-3(B)
  • AMAZON EU L-1855
  • LUXEMBOURG
  • D33724 RoHS

Left Side:

  • G3Q0W907
  • 93120H1K

Right Side:

  • MODEL NO. U05U83
  • ASSEMBLED IN USA

Blue plastic key-shape Bottom Left Top Right Front

Improve this question
15
  • 17
    @Gantendo: “…and stick it on the door.” Whose door and what door? That is the problem. Just because someone found something in front of a building does not mean that thing belongs to the owner of the building. Knowing now that this is an Amazon employee ID security key what would an elementary school do with it?
    – Giacomo1968
    Nov 8, 2021 at 19:39
  • 55
    @Gantendo also definitely don't go around sticking found USB devices in your systems. You don't know what it could do. People are known to drop USB devices containing malware deliberately.
    – muru
    Nov 9, 2021 at 9:06
  • 76
    I would like to emphasize that you should NEVER plug in an unknown USB drive into your machine. Dropping an infected USB drive in front of a building is a classic way of starting a cyberattack. It is not unfathomable that attackers could compromise an entire district's educational IT system, just because one teacher plugged in such a USB drive into their computer. Please don't do this.
    – Vincent
    Nov 9, 2021 at 9:11
  • 20
    @Gantendo that's a very risky advice. It could be malicious: e.g. by assuming keyboard and mouse identity, it can control your computer. Or it could be a USBKill :-D.
    – Edheldil
    Nov 9, 2021 at 9:13
  • 18
    @Gantendo I would also not drink from a random water bottle I found on the street (unless there is not other water nearby and I'm near dying from thirst).
    – Paŭlo Ebermann
    Nov 10, 2021 at 0:09

4 Answers 4

Reset to default
55

It’s an Amazon security token: https://fccid.io/RR-E48-U05U83

Company: Amazon Fulfillment Service Inc.
Device Name: Security Doken
Model: U05U83

So mail it to Amazon. A delivery driver probably lost it.

Improve this answer
8
  • 7
    Adding to the above: before directly mailing to Amazon (what Amazon? retail/cloud/HQ | where? returns/HQ/operations). It is good idea to contact them who knows thy have different procedure?
    – NotStanding with GoGotaHome
    Nov 9, 2021 at 6:58
  • 24
    TBH if the driver has already reported it as lost then it will probably be blacklisted from the network anyway and Amazon won't care about it anymore. Even if they take it back it will only be to dispose of it. At least, that would be the sensible thing to do from their point of view.
    – Vilx-
    Nov 9, 2021 at 11:10
  • 9
    Is "Security Doken" a typo, or some sort of brand name?
    – Radvylf Programs
    Nov 9, 2021 at 21:01
  • 9
    @RedwolfPrograms it's a portmanteau of Dongle and Token.
    – spikey_richie
    Nov 10, 2021 at 15:12
  • 6
    Mail it to amazon ? They're a business, not a charity. Contact them and let them send you something to post it back in prepaid if they want it.
    – StephenG - Help Ukraine
    Nov 10, 2021 at 19:51
43

According to this page it is a Zukey which is security key.

“Security keys help keep Amazon’s data safe. You’ll use your security key to connect to internal services and the Amazon virtual private network (VPN). There are several types of security keys at Amazon, but they all have the same features.”

Image showing all the different kinds of security keys Amazon uses.

Improve this answer
0
3

NEVER plugin a USB you found laying somewhere into a computer that is important. USBs could have malicious firmware that infects your computer the moment you plug it in. This is equally accurate for USB cables. Anything with a USB interface is susceptible.

On another note, the colour. You may be familiar with black and blue plugs and wonder what orange means? It is up to the manufacturer to decide because USB port and connector colours are not enforced in the USB specification and manufacturers can color them as they wish.

It appears they decided to colour all their Zukey's orange.

Improve this answer
1
  • Also it may be "pendrive" which accumulates power and discharges instantly making computer motherboard useless. This is second reason not to plugin unknown devices into USB port.
    – pbies
    Nov 18, 2021 at 17:16
-2

Two options:

  1. it's either a Zukey (mentioned in the other answers; it will act as a keyboard and "type" a one-time password/passphrase for the user)

or

  1. it's more like a USB Rubber Ducky, disguised as a Zukey. Such devices will also act like a USB keyboard and send useful keystrokes and/or mouse movements to the computer. More advanced devices can be remotely controlled.

"Useful keystrokes" (which can be sent a few seconds, minutes, hors after the device has been plugged in) can be commands to take over the machine, open an SSH tunnel or other remote network control connection, download or even type in malware, do funny things to annoy you - or just jiggle the mouse pointer so the machine will never activate the screen saver/screen lock.

One of the most popular ways to deliver such a "trojan horse" into some company's computer's USB port is by dropping them on the parking lot. Or, if you are a visitor or HVAP maintenance person who is allowed temporary access to a data center, you can plug it in yourself when your guard is distracted.

These things can also be used for non-malicious activities, like performing repetitive work which cannot be otherwise automated.

However, the stuff inside your device does not looks one of these "Rubber Ducky" or Arduino Leonardo-based devices.

Improve this answer
1
  • Ah- sending keystrokes. Thats a clever way. Now Im thinking what else can you plug into a usb port that can do stuff. Imagine it disguises itself as a usb hub, then it can pretend to be multiple different devices plugged into a usb hub and it won't be limited to being just being a keyboard. It can now be a keyboard AND a mouse! And an ethernet port, and a printer, and maybe a monitor but Im not sure, and a usb stick, and who knows what else. What about those usb connected GPUs. And you do sensitive operations on GPUs and all the sudden this rogue GPU pops up and logs your program execution.
    – CausingUnderflowsEverywhere
    Nov 12, 2021 at 0:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .