$44 Evilmouse Malware Grants Attackers Full Control of Systems Upon Connection

EvilMouse is a proof-of-concept hardware keystroke injector concealed inside a functioning mouse that uses an RP2040 microcontroller and custom CircuitPython firmware to autonomously execute pre-programmed commands and establish a Windows reverse shell, reportedly achieving administrator-level access within seconds while maintaining normal mouse functionality. The report highlights the low cost (~$44), soldering-based construction, AV-evasion characteristics, availability of open-source code, and recommends treating all peripherals as potential threats through USB port controls, EDR monitoring for anomalous HID behavior, and stricter device-approval policies.