http://www.nsa.gov/public_info/foia/submit_foia_request/foia_request_form.cfm

Records Requested: I request any information the NSA has on malware transmitted through USB firmware.

I request this for personal, noncommercial purposes, particularly for securing my own personal computer.

I authorize fees up to $20.