Not discounting the content of this specific blog post, but just a heads up to consider the source, Gotnews. It's run by a 'journalist' who's been profiled by the NYT [1] and Gawker [2] for his unorthodox techniques.

[1] http://www.nytimes.com/2014/12/15/business/media/sowing-mayh...

[2] http://gawker.com/what-is-chuck-johnson-and-why-the-web-s-wo...

e: his Twitter feed might provide some insight as to the veracity and thoroughness of his research: https://twitter.com/chuckcjohnson

This hardly seems like conclusive evidence.

The headline is ridiculous. You can't use timestamps to "conclusively confirm" anything.

They could have just copied the data from one drive to another after they already had it.

Even if the data had to have been transferred via USB, that doesn't mean the malware bomb was from that same source.