Technology: carrying a cell phone at the airport is risky? – 04/18/2023 – Tech

Using kiosks to recharge your cell phone battery in public places such as airports, bus stations, malls and hotels can pose a risk to smartphone security.

The FBI issued, on the last day 6, an alert about the risks of using chargers of this type due to the threat of the so-called “juice jacking” (something like “energy diversion”), cyber attack that installs malware or steals data from a connected device. by USB.

This is because these kiosks may have tampered USB ports or cables capable of transferring data between the charging station and the device being charged.

---

How to protect yourself from “juice jacking”

• Avoid using USB charging stations. Instead, charge your cell phone at outlets;
• Use your own cables and adapters when traveling;
• Use original products;
• Take a powerbank;
• When connecting your device to a USB port, a window may appear asking you to select “share data” or “charge only”. Always select “charge only”.

Source: FCC

---

Hackers can then exploit this vulnerability to install malware on the device, steal personal data such as contacts, photos and passwords, or even control the device remotely.

The FBI warning, published on Twitter, advises against using recharge kiosks at airports, hotels and malls. “Criminals have found ways to use public USB ports to install malware and tracking software on devices. Bring your own chargers and USB cables or use a wall outlet,” he said.

Although it was shared on Twitter in early April, the FBI recommendation has existed since 2019. In addition, the alert does not say whether there has been an increase in the incidence of these cases recently.

In addition to the FBI, the FCC (Federal Communications Commission), an American body analogous to Anatel, also issued an alert days later.

“Malware installed through a corrupted USB port can lock a device or export personal data and passwords directly to the criminal. Criminals can use this information to access online accounts or sell them to other criminals,” he said.

“In some cases, criminals may have intentionally left cables plugged into charging stations. There have even been reports of tampered cables being offered as promotional gifts.”

The agency also did not report statistical data related to these occurrences.

The company ChargeItSpot, which provides cell phone charging kiosks for public spaces in the United States, dismissed the FBI warning.

“Since 2011, ChargeItSpot has been aware of the ways in which USB charging can be maliciously exploited, which is why we have built (and patented) numerous protections for consumers,” it said in a statement.

The company cites measures such as single-track electrical charging, preventing access to cell phone data, protecting stations’ USB ports and cables, surveillance through security cameras, and requiring a password and security image for charging. the cell phone.