“More often, an attacker would leverage a USB drive as most new systems do not have CD drives," says Chris Morales, head of security analytics at Vectra. "That medium was most likely very specific to the intended audience (a government agency still using legacy systems that support CDs).”

Read the article