--- title: "Not a Fan of The Fan: Security Concerns Raised Over Summit Gift" description: Journalists at the Trump-Kim Summit got a USB-powered fan. Some considered it a nice gift, while others saw it as a potential security threat. Here’s why. canonical_url: https://www.acronis.com/en/blog/posts/not-fan-fan-security-concerns-raised-over-summit-gift/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Not a Fan of The Fan: Security Concerns Raised Over Summit Gift Photo credit: @MandyCNBC The 3,000 journalists covering the historic Trump-Kim Summit all received a goody bag that included a bottle of water, a hand-held fan with Kim’s face printed on it, and a guidebook to Sentosa island, the resort where the talks are taking place. Also included was a USB-powered fan to help cool the reporters down while they typed their stories in the sweltering heat of Singapore. While some journalists considered it a thoughtful gift, many of those who cover the cybersecurity beat saw a potential threat. [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: Peter Hale](https://staticfiles.acronis.com/images/content/4ebd2c6ab90855a20d45286557169382.png)](https://www.acronis.com/en/blog/authors/peter-hale/ "Peter Hale") [Peter Hale](https://www.acronis.com/en/blog/authors/peter-hale/) 5 min read Last updated 28 November 2022 ![Image 3: USB fan raises security concerns at Singapore Summit](https://staticfiles.acronis.com/images/content/2d726865bab76b2f53bba83e36a6e64a.png) USB fan raises security concerns at Singapore Summit Photo credit: [@MandyCNBC](https://twitter.com/MandyCNBC) In recounting the story of the Trojan Horse in The Aeneid, Virgil penned the now famous phrase, “Beware Greeks bearing gifts.” It seems the same caution was required at the diplomatic summit between U.S. President Donald Trump and North Korean leader Kim Jong-un, which was recently held in Singapore. The 3,000 journalists covering the historic summit all received a goodie bag that included a bottle of water, a hand-held fan with Kim’s face printed on it, and a guidebook to Sentosa island, the resort where the talks are taking place. Also included was a USB-powered fan to help cool the reporters down while they typed their stories in the sweltering heat of Singapore, which is currently over 90F/33C. While some journalists considered it a thoughtful gift, many of those who cover the cybersecurity beat saw a potential threat. As a company founded in Singapore (now with headquarters in Singapore and Switzerland), Acronis has civic pride in what the summit might accomplish. As a global [cyber protection](https://www.acronis.com/en-us/cyber-protection/) company, we have a professional interest in the security concerns raised by the USB device given to reporters. ### “Do not plug this in” Barton Gellman, a seasoned reporter who covered the U.S. National Security Agency after getting documents from Edward Snowden, offered a simple warning via Twitter. “So, um, summit journalists. Do not plug this in. Do not keep it,” adding, “Maybe the fan is just a fan. Bad bet, though.” The warnings from Gellman and others come because there’s a long history of USB devices, flash drives, and memory sticks being used as a way to deliver malware, avoiding the security measures that would otherwise block access to a computer. While no threat from the fan has been confirmed, the antennae of security experts are up for good reasons. ### History of USBs delivering malware The threat posed by USBs as a way to deliver malware has been known for a long time. Perhaps the most famous instance was the Stuxnet worm, which was a joint operation of the U.S. and Israel that targeted Iran’s nuclear enrichment facilities. A double agent simply used an infected USB thumb drive to inject malware into the Iranian systems and deliver the advanced persistence threat (APT) attack that crippled the Natanz nuclear facility. That state-run operation may be the most notorious incident, but the use of poisoned USB drives has been seen in many other instances. In the Australian neighborhood of Pakeham in Victoria, criminals were leaving USB sticks in residents’ mailboxes that offered access to Netflix, but delivered [ransomware](https://www.acronis.com/en-us/ransomware-protection/) instead. Even the International Space Station has been infected by malware that was delivered by a USB drive. The problem is that no security measures are built into USB drives and devices, making them easy to hijack. So while the fan distributed to journalists covering the summit might simply draw power from the computer, there’s also a good chance it could be delivering a malicious payload. ### North Korea’s cyber threats Contributing to the suspicion of these USB fans is North Korea’s presence at the summit. Under the leadership of Kim Jong-un, North Korea has grown its cyber-attack capabilities at a far greater pace than any other country. Hackers linked to Pyongyang have deployed new tools and escalated operations against financial targets and organizations around the world. They’ve been linked to several high-profile hacks, including the 2014 attack on Sony Pictures and last year's global WannaCry attack. A North Korean hacking group allegedly backed by Pyongyang could launch a cyber espionage operation to steal critical information – and one such operation was uncovered recently. Called GhostSecret, the attack stole data from 17 countries. With more than 3,000 journalists from countries around the world gathering in Singapore, there could be a strong temptation to spy on them. Reporters often rely on sensitive documents and sources. By infecting their computers, a nation’s intelligence agency could not only access those files, but could identify sources that the reporter is talking to – including those anonymous sources who mightbe providing insights that a secretive nation like North Korea would prefer to keep quiet. Again, while no threat has been confirmed at this point, the combination of USB devices and the potential intelligence that could be mined could prove too tempting – which is why security experts warn against using the USB fans. ### Avoiding USB infections The best way to avoid getting a malware infection is to be suspicious of all USB devices. As simple as that sounds, it goes against our natural instinct to trust people. How often do people use USBs of unknown origin? Just read the report by researchers from the University of Michigan, University of Illinois Urbana-Champaign, and Google. They left approximately 300 USB thumb drives around six campus locations. At least 45 percent of those devices were plugged into a computer. No- or low-cost tools to test USB drives for malware do exist, like CIRCLean, which uses cheap Raspberry Pi hardware disconnected from any network or other peripheral, scans the suspect USB drive for known malware threats, converts potential malware-hiding file formats like .PDFs to the safer HTML format, and (if no malware is revealed) allows those files to be transferred to a known safe USB device. The obvious risk is the potential to compromise a $5 single-board computer, but few SecOps professionals would trust such a solution to defend valuable business data against USB-borne threats. The lowest risk option is to remain extremely suspicious of unknown USB drives. Micheal Baily, one of the report’s researchers (University of Illinois Urbana-Champaign) explained to PC World that “In the current world, there is no advice...except to know the provenance of the USB drive. Do not trust, don’t plug or insert untrusted media into your computer.” In the same article, Chris Novak, a director with Verizon’s RISK team, offered PC World a simple trick for avoiding USB infections. “Think of USB sticks like toothbrushes and then you will not be so quick to pick it up and share it.” ### Final thought The BBC reports that “the gift packs were assembled by the Singapore state company which manages the island of Sentosa where the summit took place,” which has no known connections to the North Korean regime. That fact might reassure some people that the USB fans are harmless, but the smart approach is to always assume that any USB of unknown origin could carry malware. That is sound advice whether you are at home, at work, or covering a historic summit between two adversaries who are trying to put 70 years of distrust behind them. [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) ## Written by ![Image 4: Peter Hale](https://staticfiles.acronis.com/images/content/4ebd2c6ab90855a20d45286557169382.png) Peter Hale [Previous post](https://www.acronis.com/en/blog/posts/floods-and-lava-flows-preparing-your-digital-life-disaster/) [Floods and Lava Flows: Preparing Your Digital Life for Disaster](https://www.acronis.com/en/blog/posts/floods-and-lava-flows-preparing-your-digital-life-disaster/) [Next post](https://www.acronis.com/en/blog/posts/vmware-quiesce/) [VMware: "To Quiesce or not to Quiesce?"](https://www.acronis.com/en/blog/posts/vmware-quiesce/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 5: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 6: Introducing New Acronis CEO: Prakash Panjwani](https://staticfiles.acronis.com/images/blog-card/30cb571f6f1aaa131733e5727a4a250c.png) [Introducing New Acronis CEO: Prakash Panjwani](https://www.acronis.com/en/blog/posts/introducing-new-acronis-ceo-prakash-panjwani/) We are pleased to announce the appointment of our new Chief Executive Officer, Prakash Panjwani. A veteran cybersecurity CEO, Panjwani previously served as CEO of WatchGuard Technologies and SafeNet. **October 15, 2026**2 min read ![Image 7: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read