I've heard so before: that USB is a massive security hole. At least in Windows; I don't know if other OSs are also vulnerable.

Better to just never stick strange USB sticks in your computer.