Yes, officials plugged in the malware-laden USB seized at Mar-a-Lago

But it's not as bad as it first sounds.
 By 
Jack Morse
 on 
Yes, officials plugged in the malware-laden USB seized at Mar-a-Lago
Amazing. Credit: Sina Ettmer / EyeEm / getty

The first thing you want to do when you pull a USB drive off someone allegedly lying their way into presidential hangout Mar-a-Lago is plug it in your computer. Oh, wait, maybe don't do that?

A woman by the name of Yujing Zhang was arrested on March 30 attempting to bluff her way into Donald Trump's private Florida club. In addition to two Chinese passports, the New York Times reported that she carried with her four cell phones, a hard drive, and a USB drive infected with malware. And, according to the Miami Herald, U.S. government officials straight up plugged that bad boy into a computer — a bit of news that generated some serious double takes in the infosec community.

"[Secret Service agent Samuel Ivanovich] stated that when another agent put Zhang’s thumb-drive into his computer, it immediately began to install files, a 'very out-of-the-ordinary' event that he had never seen happen before during this kind of analysis," reports the Herald. "The agent had to immediately stop the analysis to halt any further corruption of his computer, Ivanovich said."

It's widely understood that plugging in random USBs is never a great idea, as they have a non-zero chance of containing malware. So, it's of course possible that Zhang's thumb drive was just like every other thumb drive and happened to contain some malicious files — as opposed to malware specifically designed to spy on the president or the club where he spends so much of his time.

It's possible, but as the New York Times reported on April 8, Zhang's hotel room contained some other interesting items discovered in a search that suggest it's also decidedly not possible. Namely, nine additional USBs, five SIM cards, $8,000 in cash, and a radio-frequency device used to find hidden cameras.

However, all may not be terrible in the land of U.S. government cybersecurity. While at first glance plugging in Zhang's sketchy USB drive may look like a case of a monumental security screw-up, if a cybersecurity expert were to plug it into a specific computer with the goal of checking it for malware, then we would say they were doing their job.

This, thankfully, looks to be what happened here — a fact made clear by a clarifying sentence in a New York Times article.

"Mr. Ivanovich testified that the computer analyst who reviewed Ms. Zhang’s devices said that the thumb drive she was carrying had immediately begun installing a program on his computer," it explains.

In other words, a computer analyst plugged the device in specifically in order to review it. Which, hey, perhaps all is not lost after all.

Mashable Image
Jack Morse

Professionally paranoid. Covering privacy, security, and all things cryptocurrency and blockchain from San Francisco.

Mashable Potato

Recommended For You
Do you have one of these 17 browser extensions? They could be tracking your browsing history.
safari and chrome apps on phone

FBI investigates Steam games with hidden malware
Steam logo on laptop

Popular Chrome extension disabled for containing malware
Google Chrome logo

Everything you need to know about the malware stealing data from Mac users
MacBook in the dark using Terminal

Newly discovered malware 'pranks' its victims – just in time for April Fools' Day
Hacker at laptop

Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.


You can track Artemis II in real time as Orion flies to the moon
Victor Glover and Reid Wiseman piloting the Orion spacecraft
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!