https://www.hackread.com/usb-device-steal-login-data-locked-pc/
A USB device can steal login credentials even if the PC is locked