US Air Force pilots used malware-laden USB drives to plan Afghanistan missions
In the early 2000s, US Air Force pilots used CDs, and later USB drives, to transfer mission-planning data between unclassified and classified systems and aircraft. Former Air Force security specialist Justin Henkel says the practice overlooked the risk of carrying malware across security boundaries, leaving military systems exposed.
Personnel sometimes bought USB drives from local shops in Afghanistan and elsewhere in the Middle East, where adversaries had begun selling infected devices. In 2008, malware known as Agent.BTZ reached a laptop with access to US Central Command; it could collect information and contact remote servers, and took 14 months to remove from Pentagon systems. The Department of Defense then banned USB drives, later allowing them again under certain conditions in 2010.
- Pilots reused removable media across classified and unclassified systems.
- Infected USB drives were sold through local shops.
- The 2008 Agent.BTZ outbreak took 14 months to clear.
New here? Start with this
US military networks are divided into unclassified systems, which handle information cleared for wider use, and classified systems, which store sensitive material. During the Afghanistan war, pilots needed to move mission plans between computers and aircraft, using removable media such as CDs and USB drives.
A USB drive can carry malicious software from one computer to another, even when the systems are kept separate. In 2008, Agent.BTZ reached a laptop connected to US Central Command, the military command responsible for operations in the Middle East and nearby regions, and spread through Pentagon systems.
The incident led the Department of Defense to ban USB drives, then allow them again under conditions in 2010. It illustrates the challenge of sharing information quickly while protecting military networks from threats carried across security boundaries.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Moving mission data between classified and unclassified systems was operationally useful, and portable media offered a practical way to get information to aircraft in a demanding environment. From this perspective, the security failure lay in insufficient safeguards and oversight; a conditional return to USB use could balance cyber risks with mission needs.
The case against
Portable media created a foreseeable route for malicious code to cross security boundaries, with potentially serious consequences for military operations and sensitive information. The Agent.BTZ incident illustrates why convenience should not outweigh strict controls: locally sourced devices and weak handling practices exposed systems to a threat that proved costly and slow to remove.