Latest news with #juicejacking
Android Authority
an hour ago
- Android Authority
PSA: New 'choicejacking' attacks can steal your Android or iPhone's data without your knowledge
Mishaal Rahman / Android Authority TL;DR Researchers have identified new methods to exploit backdoors into Android and iOS to steal data. 'Choicejacking' is an evolution of the infamous juice jacking technique and also uses a rigged USB charger or cable to initiate data theft on your mobile devices. Choicejacking uses a combination of techniques to bypass existing juice jacking protection while faking user input to enable permissions illicitly. Juice jacking is a decade-old technique where hackers can install spyware and gain access to your phone when you use a public charging point to juice up (hence, the name) the phone's battery. Over the years, Google and Apple have enforced restrictions that prevent data transfer, especially when your phone is locked. Although these measures have been believed to suffice, researchers recently discovered they may not be enough, primarily in the face of more sophisticated attacks. Researchers at TU Graz, Austria, recently identified a series of novel techniques that can bypass existing preventive restrictions and access data on anyone's iPhone or Android device using the USB port. They have named the new technique 'Choice-jacking,' a wordplay on the familiar technique of juice jacking. In the paper, researchers claim they were able to spoof user actions, such as actively switching from just charging to data transfer and allowing a prompt that enables an external system or device to access files and settings on your phone. The nature attack involves replicating user choices, which could have led to the naming. Like juice jacking, choicejacking uses malicious chargers to initiate attacks on the users' phones. Unlike connections to PCs, both Android and iOS allow direct access to wired accessories without explicit permission, which can be exploited for attacks. On Android, specifically, the attacks work by exploiting permissions for peripherals (via AOAP or Android Open Accessory Protocol), such as mice or keyboards. Attackers can then begin hijacking system input through ADB (or Android Debug Bridge), which can simulate user input and change the USB mode to allow data transfer. The attack then proceeds with a series of commands aimed at gaining complete control of the device and gaining key access for further control. On iOS, a rigged USB cable or charger can be used to trigger a connection event for a Bluetooth device. Although it may appear as a regular Bluetooth-based audio accessory to your iPhone, it could act as the machinery to secretly allow data transfer and gain access to specific files and photos. However, it cannot access the entire iOS system as it can on Android. The team says it tested these attacks on eight top phone brands, including Xiaomi, Samsung, Google, Apple, etc. It notified these brands, and six out of eight have already patched — or are in the process of patching — the vulnerability. Despite these fixes, the best defense against choicejacking would be to avoid using public chargers at all costs. If you're traveling or anticipate your phone's battery may not last through the duration that you are out, we suggest carrying your own solution. There are plenty of chargers or power banks that we recommend so you can avoid attacks like choicejacking and avoid getting malware on your phone, or worse, losing your personal data in the process. Other solutions, such as Android's Lockdown mode, could be your saviors, but you would need to activate it manually every time you charge your phone with an unknown charger. Follow
Daily Mail
21-07-2025
- Daily Mail
TSA issues urgent warning to all smartphone users over little-known method used to steal private data at airports
Many people would consider themselves to be nervous flyers. But a recent warning from the Transportation Security Administration (TSA) may be an indication that you need to be more worried about what happens before you even get on a plane. 'In this technology age, cybersecurity has never been more important,' the TSA wrote on a recent Facebook post. 'You've likely heard about things like email scams and social media scams (tip: don't accept that friend request from your buddy's "new" profile), but today we want to share our two best tips for staying cyber safe at airports while you're traveling.' Both of the tips involved safety with your smartphone. While we all typically glue ourselves to our phone once we're safely by our gate and waiting for a flight, it's possible that your mobile device might be behind your next cybersecurity attack. The TSA suggested that charging ports at the airport aren't always as trustworthy as you might have assumed. They warned against 'juice jacking,' which is when a charging port has been altered so that it can be used to transfer malware to or steal personal information from a phone. 'So, when you're at an airport do not plug your phone directly into a USB port,' the TSA wrote. 'Bring your TSA-compliant power brick or battery pack and plug in there.' The second warning involves WiFi. In terms of free internet, the TSA pretty much says to stay away entirely. 'Don't use free public WiFi, especially if you're planning to make any online purchases,' the entity posted. 'Do not ever enter any sensitive info while using unsecure WiFi.' Similar to juice jacking, some unsecure WiFi networks could be stealing your information - which includes your card information when you're trying to pay for something. So what if you need to get on the WiFi? The TSA suggested you disconnect from unknown networks, only enter encrypted sites, and stay away from downloads. You should also be weary of inputting any information of yourself aside from your email onto any sort of site. Though both charging points and WiFi are offered at airports, it might be safest to avoid them. By following the TSA's tips, the most dangerous thing to consider at the airport would be missing your flight.
The Sun
08-07-2025
- The Sun
The dangerous mistakes you're making before a holiday including what shoes NEVER to wear on a flight – from a travel pro
A TRAVEL whizz has warned holidaymakers to steer clear of airport charging stations and it's not just to avoid a dodgy socket. Pollyann Giffin, 40, says 'juice jacking', a sneaky form of hacking, could ruin more than just your holiday. 4 The scam sees hackers use public USB ports to access your phone, swipe your data or infect it with malware and you'd never know until it's too late. Pollyann, who's racked up over two decades of travel experience, shared her top travel tips with her 14,000 Instagram followers and the clip has already notched up more than 37,000 views. She said: 'I used to be a very anxious traveller and love to be prepared. 'I research a lot and I've also learned a lot through personal experiences- good and bad. 'As a teacher I love to help people learn and be prepared for their own travels. 'If they can learn from my mistakes and not have to make them themselves, great!' Here are Pollyann's top tips. She said: 'It's called juice jacking - a sneaky way hackers can access your data through public USB charging stations. 'Once connected, they can install malware or steal personal info without you even knowing.' BE CAREFUL WHAT YOU EAT AND DRINK Pollyann said: 'Avoid carbonated drinks mid-flight - lower cabin pressure makes gas expand, leading to bloating and discomfort. 'I'm jumping with joy' say Dublin Airport passengers as another new food spot 'officially lands' in Terminal One 'Also avoid gassy veggies like broccoli, cauliflower, cabbage, and Brussels sprouts before your flight. 'These fibre-rich foods ferment in your gut and produce gas, which expands even more at high altitudes thanks to cabin pressure. 'The result? Bloating, discomfort, and a not-so-fun flight. 'Opt for easy-to-digest snacks like bananas, white rice, or yogurt before boarding to keep your tummy happy and your flight comfortable.' APPROPRIATE FOOTWEAR The expert said: 'Don't wear sandals on the plane. 'And closed shoes protect your feet from germs, dropped items, and spills - plus, they're safer in emergencies.' BE COURTEOUS OF OTHER PEOPLE Pollyann warned: 'Be aware of your surroundings. 'Whether it be in the airport or in a new city, be aware of your volume, body and others who are trying to navigate in the same space.' DO NOT OVERPACK She said: 'Don't overpack your carry-on. 'If you can't lift it into the overhead bin yourself, it's too heavy - a bag that's too heavy puts you and others at risk and flight attendants are not required to help.' Holiday packing tips Jemma Solomon, aka The Label Lady has got 5 packing tips to help you get organised for your next holiday. 1. Write a list Think about all the essentials you need to take with you; suncream, medicine, a few games for the kids, beach towels, and write everything in one list, which you can tick off as you add it to your suitcase. Or for complete ease, try Google's AI app - Gemini - which will create a list for you and help you not over pack. 2. Involve your kids Jemma said: 'My girls are getting older, they're 11 and nine, and they enjoy helping to pack. So I send them a list, and say 'this is what you need' and they follow the list. 'And then I give them a rucksack each - and say to them 'you can have whatever you want in there as long as it's not liquid', and they can take that on the plane. And that's their 'home away from home' items.' 3. Try a hack or two She said: "I think they all work, but for different reasons - and you've just got to pick the right one for your trip. "Rolling your clothes is really good to stop your clothes from getting creases. And if you're trying to get a lot of items into your case, it's a space saver. 'Packing cubes are great - for example, I'm going on holiday with my three kids and we're all using the same suitcase for our clothes. "These handy compartments let you separate your clothes, toiletries and tech into designated cubes, maximising luggage space by keeping your items compressed and neatly stacked. "I love taking them abroad with the family and it means my kids can easily take charge of their own items once we've arrived." 4. Decant beauty products Do you really need to take full-size bottles of shampoo and conditioner with you? The beauty industry has evolved so much, you can now buy shampoo bars or sheets - which are much lighter and smaller. Or, if you'll be popping to the shops when you're abroad, consider buying some items when you arrive. 5. Get organised before you come home Jemma said: 'When you repack on holiday [before coming home], the trick is to separate clean from dirty clothes. 'Also pack it in some form of order - so lights, darks, colours for items that need washing, or if you wash your clothes by person in the household, piles for each person. "Then you can put it straight into the washing machine. Do it straight away, don't leave it." ENJOY EVERY MOMENT Finally the expert dropped her most crucial tip: 'Put the phone away sometimes. 'You don't need to document every moment - being present is what makes a trip special. 'Do at least one thing off the beaten path. 'Skip some Instagram suggested spots and find something that feels like your discovery.' With summer travel in full swing, Pollyann's tips are a handy reminder to stay smart and prepared and to fly safe this season. 4 4
Daily Mail
30-06-2025
- Daily Mail
Experts warn holidaymakers about charging their phones at the airport over 'juice jacking' scam
Tourists have been urged to be cautious about using airport USB phone charging ports over fears of cyber attacks. 'Juice jacking' - a form of cybercrime which involves hackers tampering with public USB ports - is on the rise in the USA and experts fear it could soon become commonplace at UK airports. As USB ports are able to transmit power and data, they can be 'extremely risky' to use if they have been tampered with. Unsuspecting holidaymakers could have malware uploaded onto their phone when they plug it into an airport USB outlet. Hackers can then access personal data such as passwords and banking information with ease. So, how can tourists protect themselves from 'juice jacking'? IT experts from Tecnovy Academy have shared their top tips to avoid falling victim. Fully charge all devices before leaving home The experts advise charging devices before leaving home and carrying a power bank in your hand luggage so you aren't forced to rely on airport USB ports. Always use your own plug and wire If you do need to charge your phone at the airport, the experts recommend using a traditional plug socket with your own wire instead. Plugs can only transfer power, not data, so can't be affected by the hackers. Buy a USB data blocker USB data blockers are small adapters that attach to the end of your wire and block transmission from USB ports, only allowing power through. It will stop malware reaching your device even if the USB port has been tampered with. Be wary of public USB ports Juice jacking could happen at any public USB port, not just at the airport. USB ports at pubs, train stations or shopping centres could also be risky. Ertul Topuzoglu, CEO of Tecnovy Academy, says: 'With juice jacking reports on the rise in the US, it is crucial for Brits to stay aware, as it is likely to reach the UK soon. While using any public USB port is a risk, hackers seem to be targeting airports specifically. 'This is likely because people in airports are more reliant on USB charging ports than in other public places, where they might otherwise wait until they are back at home or in their car. 'With many people having holidays booked over the summer, it is important to stay informed on how to keep your devices safe in the airport. No matter how convenient a USB port might seem, they are never worth the risk to your device and personal data. 'If you think you have plugged your device into a USB port that has been tampered with, disconnect immediately and run an antivirus or malware detection software as soon as possible. Change all of your passwords, particularly for things like your bank, and ensure you report it to the airport authorities so that it can be properly investigated.'
Yahoo
23-06-2025
- Yahoo
The TSA Warns Against 'Juice Jacking' at the Airport—Here's How to Protect Yourself
The Transportation Security Administration recently warned travelers against the dangers of 'juice jacking'—but it may not be as common as you think. Juice jacking can occur when criminals install malware into public charging stations. Occurrences of juice jacking are rare, but possible—and it's always a good idea to protect yourself, just in was the last time you used a USB charging station at the airport? According to the Transportation Security Administration, you should think twice before charging your phone at one of those stations. "Hackers can install malware at USB ports (we've been told that's called 'juice/port jacking')," the TSA recently advised travelers on Facebook. "So, when you're at an airport, do not plug your phone directly into a USB port. Bring your TSA-compliant power brick or battery pack and plug in there." The warning has sparked fresh concern about "juice jacking," a cyberattack where criminals install malware on public charging stations to steal data from connected devices. But how real is this threat for everyday travelers? We asked a few experts. According to Calum Baird, a digital forensics expert, juice jacking is more theoretical than anything else. Despite the alarming warnings circulating online, Baird says he hasn't encountered any actual cases in his professional experience. "I see it pop up online every now and then, but most, if not all, modern smartphones now require confirmation prior to data transfer via USB," Baird says. Baird notes that even if travelers encounter compromised charging stations, most modern devices have built-in protections. Baird's personal experiences are also backed by the Federal Communications Commission, and on its website, the organization states that although it is technically possible, the FCC is not aware of any confirmed cases of juice jacking. Danny Jenkins, cofounder and CEO of ThreatLocker, offers another perspective on what travelers should actually worry about, and points to an unexpected source: deceptive USB-C cables. "Shady USB-C cables likely pose the greater risk, partly because the dangers of public charging ports are more widely known," he says. Jenkins says that people have become more aware of the dangers associated with public charging stations, so they're more cautious about using them. However, many travelers don't think twice about buying a cheap charging cable from a questionable vendor at an airport shop or online marketplace, making these cables a more successful point of attack. "Attackers are always searching for new exploits," he says. "While upcoming measures may mitigate issues related to juice jacking, vulnerabilities could still emerge as attackers gain access to new USB technologies and attempt to bypass these protections." While it's hard to find reports of actual juice jacking cases, it's always a good idea to take extra precautions, just in case. Jenkins says that portable battery packs can help mitigate the chances of a juice-jacking attack. If you don't have any other options aside from a public charging station, Jenkins recommends checking for signs of tampering on the USB port area. Baird says to check your phone as you plug it in. 'If it's asking you to trust a device you've connected to, decline,' he says. 'It doesn't need data transfer to charge.' While juice jacking remains largely theoretical, the TSA's cautious approach makes sense given the high-traffic nature of airports and the valuable data stored on travelers' devices. However, modern smartphones have built-in protections, and a few simple precautions can drastically eliminate any risk. Instead of avoiding public charging entirely, travelers can stay safe by bringing their own charging equipment, paying attention to device prompts, and being selective about where they source cables and adapters. After all, a dead phone battery poses a more immediate risk than juice jacking for most travelers. Read the original article on Travel & Leisure
