A manufacturing company's security team discovers that several workstations on the plant floor became infected with malware, even though those systems have no internet access and are on an isolated network segment. Investigation reveals that a technician used a personal USB flash drive to transfer configuration files between machines. Which threat vector was most likely responsible for the infection?