'The attack requires both the targeted computer and the mobile phone to have malware installed on them, but once this is done the attack exploits the natural capabilities of each device to exfiltrate data.'

So it needs a previous security breach. Challenging, because as the article mentions, in secure environments the pc is not connected to internet nor are USB sticks allowed.