It was very feasible. The exploit to propagate via usb was CVE-2010-2568. Odds are you can still find details on it.