USB drives are one of the easiest ways for cybercriminals to spread malware and infect machines. USB drives can be loaded with malware designed to take control of a targets computer and steal information. A USB drive can trigger the chain of events, as can an IP phone or a printer. The US military banned the use of thumb drives in 2008. A researcher who deconstructed the USB fan gadget from the North Korea summit found no evidence of malicious software. Users should never use USB drives or hardware that is found or provided by strangers.”]
Source: https://www.cybertalk.org/2018/07/06/usb-drives-everyday-devices-can-conduits-cyberattack/