Kaspersky: USBCulprit Malware used against targets in Southeast Asia. Malware developed by advanced persistent threat group known as Cycldek, which has been active since 2013. The malware is delivered through phishing emails, but can copy and exfiltrate data from that device to portable storage devices. It’s not known how many organizations it’s targeted and whether any of these resulted in data theft. It also has the ability to move laterally through the device, but the malware will wait for the presence of a removable storage device such as a USB, before copying and removing files.”]
Source: https://www.cuinfosecurity.com/malware-uses-usbs-to-help-steal-data-report-a-14393