What is Juice Jacking in Public USB Charging Stations?
13 September, 2024
Synopsis
The Indian Computer Emergency Response Team (CERT-In) has issued a warning about the dangers of 'juice jacking'.
Juice jacking is a type of USB charger scam where cybercriminals compromise public USB charging stations to access and manipulate data on connected devices.
CERT-In advises using personal charging devices and avoiding device use at public charging stations, alongside keeping software updated, to combat these security threats.
The central government has issued a crucial warning to the public regarding the dangers of USB charger fraud in commonly visited public places like airports, hotels and bus stations. This warning highlights the emerging threat of the USB charger scam, a tactic increasingly used by cybercriminals. In this article, you can get information on USB charging scams and ways to prevent them.
What is Juice Jacking?
Juice jacking is a technique where compromised USB chargers are used to access and manipulate data on connected devices. When you connect your devices to these tampered ports, you expose yourself to data theft, malware attacks or even ransom hijacking. Cybercriminals install malware on USB charging stations or cables that, once a device is plugged in for charging, can automatically deploy harmful software. Hackers can exploit USB devices or ports to gain unauthorised access to data or install malware, making USBs potential hacking tools.
What are the Types of Juice Jacking?
Juice jacking attacks typically fall under the following categories:
Data theft
This type of juice jacking occurs when you plug your devices into compromised or fake charging stations using your data-transmitting USB cables. This allows the hackers to steal information, including passwords and pins.Malicious installations
This type of juice jacking involves the victims using compromised charging cables. Hackers could potentially use these compromised cables to transmit malicious payloads from your device to a nearby device that they control that is within Wi-Fi range.
How Should You Prevent Juice Jacking Attacks?
To defend against these risks, it is vital to take proactive steps:
Opt for electrical wall outlets or personal charging solutions: It is safer to use traditional electrical outlets or carry your own cables and power banks, thus avoiding public USB ports.
Enhance device security and be cautious with connections: Always secure your device with a PIN or password and avoid connecting to unknown devices. This precaution helps prevent unauthorised access and reduces the likelihood of falling victim to a USB scam.
Charge devices when powered off: Consider charging your phone or device when it is turned off. This reduces the vulnerability to external threats during charging.
Make use of AC adapters: Juice jacking is not possible if a device is charged via the AC adapter.
Carry a power bank as backup: You can opt to carry an external reserve battery and you can travel longer without needing to use a public charging kiosk or wall outlet.
What Steps Should You Take After a USB Charger Scam?
If you encounter any form of USB charger fraud or suspicious activities, report them immediately. You can do so through the national cybercrime website at www.cybercrime.gov.in or by contacting the dedicated helpline in 1930. Remember, your digital safety is paramount. Stay alert and protect your devices from these hidden cyber dangers.
Your USB can be at risk because it can be a gateway for malware transmission or data theft when connected to compromised devices or ports. To make your USB safe, only use trusted USB devices, avoid using public USB ports for charging, regularly scan your USB for malware and keep your device's software updated.
Join Vigil Army, where Vigil Aunty will decode various frauds and give people a heads-up on the dos and don’ts of combating frauds online. To join the Vigil Army, send ‘Hi’ to her via WhatsApp number: 7290030000.
Disclaimer: *Terms and conditions apply. The information provided in this article is generic in nature and for informational purposes only. It is not a substitute for specific advice in your own circumstances.
