For under $100, compact hardware can turn a shipped package into a Trojan horse for attacks. //

The point of these exercises, Henderson said, was to get companies to "start considering packages untrusted in the same way that you would consider email or USB keys."

If you eye that next Amazon box that arrives at the office a little more suspiciously, then, well, mission accomplished.