Mouse motion simulators may be a cyberthreat vector targeting remote workers and their employers, Kaspersky experts warn. The devices, which gained popularity with the advent of hybrid and remote work formats, could contain malware. Although these simulators may seem harmless and convenient at first, they may come from unknown sources and vendors and pose a serious threat to device security, potentially compromising the data of both the employee and the organization they work for.

Also known as mouse jigglers, the devices are designed to create the impression that someone is working on the computer, preventing it from going into sleep mode and keeping the status indicators in corporate messengers online. These devices plug into the USB ports and simulate mouse movement on the screen. Throughout 2024, there were 3 billion local threats detected and blocked by Kaspersky's main line of B2B and B2C solutions globally – these include malware that is spread via removable USB drives, CDs and DVDs, or that initially makes way onto the computer in non-open form (for example, programs in complex installers, encrypted files, etc.). In Saudi Arabia, 16.7% of users faced local threats in July-September 2024.

A mouse simulator sold on a popular marketplace

“USB mouse simulators and similar devices could become an entry point for cybercriminals who can use them to gain access to confidential information or disrupt the operation of corporate digital systems,” warns Marc Rivero, Lead Security Researcher at Kaspersky. “Users should be mindful about connecting unknown USB devices to their corporate computers, and businesses should organize regular cybersecurity training courses for employees so that they are aware of potential threats. It’s also of vital importance to have reliable endpoint protection on corporate devices that can detect and neutralize suspicious activity. These measures will help protect the company from possible attacks and maintain data security.”

To block local threats, including those transferred through USB devices, follow the recommendations below.

Businesses:

  • use solutions from the Kaspersky Next product line that provide real-time protection from online and offline threats for organizations of any size and industry;
  • look into boosting your employees’ digital literacy to minimize the cyber risks from the human side by using an online tool that offers comprehensive cyber training for staff.

Individuals:

  • use a comprehensive security solution, such as Kaspersky Premium, to control and scan all of your connected devices and prevent malware from accessing your computer;
  • ensure any USB accessories you are using were produced by known brands.

About Kaspersky

Kaspersky is a global cybersecurity and digital privacy company founded in 1997. With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect businesses, critical infrastructure, governments and consumers around the globe. The company’s comprehensive security portfolio includes leading endpoint protection, specialized security products and services, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. We help over 200,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.