Using friendly-looking USB sticks as a vector for malware distribution is a trick as old as the internet itself and, apparently, it’s still quite popular with the criminals.
Hackers Have Been Sending Malware-Filled USB Sticks to U.S. Companies Disguised as Presents