Pilfering Passwords with the USB Rubber Ducky. Can you social engineer your target into plugging in a USB drive? How about distracting 'em for the briefest of moments? 15 seconds of physical access and a USB Rubber Ducky is all it takes to swipe passwords from an unattended PC. In honor of the USB Rubber Ducky appearance on a recent episode of Mr Robot, we're recreating this Hollywood hack and showing how easy it is to deploy malware and exfiltrate data using this Hak5 tool.