Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

$44 Evilmouse Autonomously Executes Commands and Compromises Systems Once Connected

The Evilmouse is a $44 hardware implant that resembles an ordinary computer mouse. It functions as a covert keystroke injector, similar to the Hak5 Rubber Ducky, utilizing the mouse's form factor to bypass basic user awareness training.

SBy Sarah DawsonFeb 12, 20262 min read

The Evilmouse is a $44 hardware implant that resembles an ordinary computer mouse. It functions as a covert keystroke injector, similar to the Hak5 Rubber Ducky, utilizing the mouse's form factor to bypass basic user awareness training.

When connected, it autonomously executes payloads to run commands or deliver reverse shells without raising suspicion. Unlike traditional USB drives, which are often flagged post-training, a functional mouse blends seamlessly into any workspace. Evilmouse maintains the optical sensor and button functionality of the host mouse through an integrated USB hub.

The Evilmouse is built using affordable components, as detailed below:

RP2040 Zero microcontroller - $3 Adafruit 2-Port USB Hub Breakout - $5 Amazon Basics Mouse - $6 USB-C Pigtail Cable - $3 Rosin-core 60/40 Solder - $8 USB-C Data Cable - $8 Flux Paste - $6 Kapton Tape - $5 Dupont Wires - ~$0.03

This cost-effective solution undercuts the $100 price tag of a Rubber Ducky, providing an accessible option for red teams or malicious actors.

The Evilmouse is a $44 hardware implant that resembles an ordinary computer mouse.
Sarah Dawson · Thehackingpost

The Evilmouse is housed in a $6 Amazon Basics mouse, requiring modifications to the compact shell. This involves the removal of plastic ribbing and desoldering the stock PCB's white connector. The RP2040 Zero, flashed with CircuitPython firmware, manages exploitation. Custom code was developed due to incompatibility with pico-ducky, enabling a Windows AV-safe reverse shell to a listener host.

Soldering the USB hub, pigtail, and wires is a delicate task, requiring practice on through-hole components. Kapton tape is used for insulation, and careful wire routing ensures the shell closes while maintaining functionality.

The full code is available on GitHub , with plans to support DuckyScript. The repository is intended for educational purposes only, with a disclaimer against malicious use.

Evilmouse highlights vulnerabilities in Human Interface Device (HID) attack vectors, exploiting the trusted nature of peripherals. Defenses include:

Advertisement

USB device whitelisting via Group Policy Endpoint detection tools scanning for anomalous keystrokes Physical port restrictions

For penetration testers, Evilmouse offers a low-cost alternative to commercial gear, with potential enhancements such as Rust for faster injection or remote triggers.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026