Juice Jacking - phone data theft

Questions on how we spend our money and our time - consumer goods and services, home and vehicle, leisure and recreational activities
Locked
User avatar
Topic Author
F150HD
Posts: 2429
Joined: Fri Sep 18, 2015 7:49 pm

Juice Jacking - phone data theft

Post by F150HD » Sun Nov 17, 2019 11:32 am

Considering how careful most BHs are using password managers to strengthen passwords etc and avoiding 2 factor authentication via text.....apparently another way to have your phone hacked is afoot.

LA officials issued the warning amid the rise of the scam known as "juice jacking."

In the scam, scammers load malware directly onto the public charging station or the cables that are left plugged in at stations. When you plug your device into the station, the malware would infect your smart phone, laptop or other device.

The malware could export your data or passwords directly to the scammer, putting you at risk.


Tech experts warn of 'juice jacking' ahead of busy holiday travel season


Image

livesoft
Posts: 68616
Joined: Thu Mar 01, 2007 8:00 pm

Re: Juice Jacking - phone data theft

Post by livesoft » Sun Nov 17, 2019 11:34 am

So why not use a power-only-no-data USB cable?
Wiki This signature message sponsored by sscritic: Learn to fish.

lazydavid
Posts: 2584
Joined: Wed Apr 06, 2016 1:37 pm

Re: Juice Jacking - phone data theft

Post by lazydavid » Sun Nov 17, 2019 12:01 pm

livesoft wrote:
Sun Nov 17, 2019 11:34 am
So why not use a power-only-no-data USB cable?
Yup, that works perfectly. There are also "USB Condoms" that achieve the same result with any standard power cable.

I've been telling our employees not to use public charging stations for close to 10 years now. Humorously enough, when I set one up at the office for general use, several people asked me if it was a trick. :)

3-20Characters
Posts: 683
Joined: Tue Jun 19, 2018 2:20 pm

Re: Juice Jacking - phone data theft

Post by 3-20Characters » Sun Nov 17, 2019 12:19 pm

This potential threat has been around a while and has been greatly mitigated with security updates and other changes on both android and iOS. If you’re worried, just use the AC adapter and cable. In fact, just do that anyway. Very low on my worry list.

GAAP
Posts: 955
Joined: Fri Apr 08, 2016 12:41 pm

Re: Juice Jacking - phone data theft

Post by GAAP » Sun Nov 17, 2019 12:35 pm

This has been around for a long time. Plugging anything not yours into one of your devices is risky -- that includes "freebie" thumb drives, borrowed chargers, public charging stations, etc. There's a reason that many companies prohibit (and/or block) sharing data on flash drives...

Just don't do it.
“Adapt what is useful, reject what is useless, and add what is specifically your own.” ― Bruce Lee

User avatar
whodidntante
Posts: 6695
Joined: Thu Jan 21, 2016 11:11 pm
Location: outside the echo chamber

Re: Juice Jacking - phone data theft

Post by whodidntante » Sun Nov 17, 2019 1:29 pm

What phone/tablet/abacus are y'all running that has this issue? This is not a concern for my devices because they will not expose any private data until I say so.

privateer79
Posts: 120
Joined: Fri Apr 04, 2008 12:21 am

Re: Juice Jacking - phone data theft

Post by privateer79 » Sun Nov 17, 2019 1:50 pm

whodidntante wrote:
Sun Nov 17, 2019 1:29 pm
What phone/tablet/abacus are y'all running that has this issue? This is not a concern for my devices because they will not expose any private data until I say so.
a lot still do.... many intend not to, but that doesn't mean their implementation achieves that goal.

that doesn't mean this attack is actually happening in the wild... I actually haven't heard of a case of this actually happening.

livesoft
Posts: 68616
Joined: Thu Mar 01, 2007 8:00 pm

Re: Juice Jacking - phone data theft

Post by livesoft » Sun Nov 17, 2019 2:17 pm

I confess that I read a different article about the LA DA's tweet on the same subject.
Wiki This signature message sponsored by sscritic: Learn to fish.

User avatar
Topic Author
F150HD
Posts: 2429
Joined: Fri Sep 18, 2015 7:49 pm

Re: Juice Jacking - phone data theft

Post by F150HD » Sun Nov 17, 2019 2:25 pm

Issue isn't about 'using a flash drive' or the like.

So loading malware onto a public USB charging station has been around for "a long time". Where I live, few if any places have had public USB charging ports until more recently, if at all.

Millennial
Posts: 236
Joined: Tue Mar 25, 2014 4:46 pm

Re: Juice Jacking - phone data theft

Post by Millennial » Sun Nov 17, 2019 2:34 pm

F150HD wrote:
Sun Nov 17, 2019 2:04 pm
livesoft wrote:
Sun Nov 17, 2019 11:34 am
So why not use a power-only-no-data USB cable?
did you even actually read the article? as based upon your response, its clear you did not.
I read the article, and I think livesoft's suggestion makes sense. What about his response made you think he didn't understand the problem?

Katietsu
Posts: 2520
Joined: Sun Sep 22, 2013 1:48 am

Re: Juice Jacking - phone data theft

Post by Katietsu » Sun Nov 17, 2019 3:04 pm

Amazon: $6.99

https://www.amazon.com/gp/aw/d/B00QRRZ2 ... B00T0DW3F8

Personally, when traveling, I carry an Anker Power Pack that can recharge my phone fully twice. Small enough to fit in my pocket if needed.

lazydavid
Posts: 2584
Joined: Wed Apr 06, 2016 1:37 pm

Re: Juice Jacking - phone data theft

Post by lazydavid » Sun Nov 17, 2019 3:10 pm

F150HD wrote:
Sun Nov 17, 2019 2:04 pm
livesoft wrote:
Sun Nov 17, 2019 11:34 am
So why not use a power-only-no-data USB cable?
did you even actually read the article? as based upon your response, its clear you did not.
First, you posted two articles (three, actually, if you include the one on 2FA). Which of the three are you accusing livesoft of not reading?

Also, which of the three mentions the use of power-only USB cables? I read both of the relevant articles, and the answer to that question is neither. So your attitude is totally unwarranted.

In fact, cables like the ones that livesoft suggested are an excellent and completely foolproof solution to this problem, which is useful information you would have learned if you had read his/her post with an open mind.

student
Posts: 4141
Joined: Fri Apr 03, 2015 6:58 am

Re: Juice Jacking - phone data theft

Post by student » Sun Nov 17, 2019 3:28 pm

Katietsu wrote:
Sun Nov 17, 2019 3:04 pm
Amazon: $6.99

https://www.amazon.com/gp/aw/d/B00QRRZ2 ... B00T0DW3F8

Personally, when traveling, I carry an Anker Power Pack that can recharge my phone fully twice. Small enough to fit in my pocket if needed.
Thanks. I did a search and came up with the same item. I am buying this. Also, even without this gadget, I guess one can plug the phone to a power pack and plug the power pack to the socket. This should stop data flow

lazydavid
Posts: 2584
Joined: Wed Apr 06, 2016 1:37 pm

Re: Juice Jacking - phone data theft

Post by lazydavid » Sun Nov 17, 2019 3:46 pm

student wrote:
Sun Nov 17, 2019 3:28 pm
Thanks. I did a search and came up with the same item. I am buying this. Also, even without this gadget, I guess one can plug the phone to a power pack and plug the power pack to the socket. This should stop data flow
It would, but many power packs do not support being charged and charging a device simultaneously. All 10 of the regular ones I own are like this, while the 2 that are also wifi routers can do both. You would have to make sure yours does not have this limitation. But you could certainly, for example, charge the battery pack using the USB port at the airport, then use the battery to recharge your phone on the plane.

suemarkp
Posts: 208
Joined: Sun Nov 12, 2017 8:18 pm

Re: Juice Jacking - phone data theft

Post by suemarkp » Sun Nov 17, 2019 3:48 pm

Why do these charging stations even have a data capability? I would think they only need the power wires and not the data ones (or just block the data if they are common wires). I could perhaps see one plugged in device affecting others if it is a common power bus, but that isn't uploading things into the charger it is device to device. So you would be safe if you are the only one plugged in. Or perhaps they are sticking a tainted memory stick into one of the ports.

I wish these articles would provide a bit more technical data to help those that understand some of the mechanisms. I believe the usb wall outlets in my house have no storage capability.
Mark | Kent, WA

Millennial
Posts: 236
Joined: Tue Mar 25, 2014 4:46 pm

Re: Juice Jacking - phone data theft

Post by Millennial » Sun Nov 17, 2019 4:01 pm

suemarkp wrote:
Sun Nov 17, 2019 3:48 pm
Why do these charging stations even have a data capability?
Only for malicious purposes. They don't need any data transfer capabilities. The bad guys make devices that look like the power devices, but also transmit data, in an effort in to tricking people into plugging in to them.

lazydavid
Posts: 2584
Joined: Wed Apr 06, 2016 1:37 pm

Re: Juice Jacking - phone data theft

Post by lazydavid » Sun Nov 17, 2019 4:06 pm

suemarkp wrote:
Sun Nov 17, 2019 3:48 pm
I wish these articles would provide a bit more technical data to help those that understand some of the mechanisms. I believe the usb wall outlets in my house have no storage capability.
You should not be concerned about ones you installed in your own home. The risk is that for the public ones, you don't know their provenance. They could be wholly fraudulent (bad guy set the charging kiosk up himself), with a laptop or raspberry pi built in to attack any device that gets connected. Or they could be compromised, either by surreptitiously installing hardware behind the ports or compromising the hardware already present.

User avatar
Kenkat
Posts: 5354
Joined: Thu Mar 01, 2007 11:18 am
Location: Cincinnati, OH

Re: Juice Jacking - phone data theft

Post by Kenkat » Sun Nov 17, 2019 4:25 pm

3-20Characters wrote:
Sun Nov 17, 2019 12:19 pm
This potential threat has been around a while and has been greatly mitigated with security updates and other changes on both android and iOS. If you’re worried, just use the AC adapter and cable. In fact, just do that anyway. Very low on my worry list.
This is what i do as well. Added plus is that the AC adapter usually charges your phone more quickly than USB.

student
Posts: 4141
Joined: Fri Apr 03, 2015 6:58 am

Re: Juice Jacking - phone data theft

Post by student » Sun Nov 17, 2019 5:02 pm

lazydavid wrote:
Sun Nov 17, 2019 3:46 pm
student wrote:
Sun Nov 17, 2019 3:28 pm
Thanks. I did a search and came up with the same item. I am buying this. Also, even without this gadget, I guess one can plug the phone to a power pack and plug the power pack to the socket. This should stop data flow
It would, but many power packs do not support being charged and charging a device simultaneously. All 10 of the regular ones I own are like this, while the 2 that are also wifi routers can do both. You would have to make sure yours does not have this limitation. But you could certainly, for example, charge the battery pack using the USB port at the airport, then use the battery to recharge your phone on the plane.
I did not know that some will not do this. I tried one of mine before I posted the message. After seeing your message, I tried a few more and have a 50% success rate.

Small Savanna
Posts: 142
Joined: Sat Feb 09, 2019 2:27 am

Re: Juice Jacking - phone data theft

Post by Small Savanna » Sun Nov 17, 2019 5:39 pm

I've wondered if malware could be lurking on the entertainment system of a rental car. When you plug your phone into the rental car for charging, is it too paranoid to use a 12V "cigarette lighter" adapter rather than the built-in USB port?

Trader Joe
Posts: 1269
Joined: Fri Apr 25, 2014 6:38 pm

Re: Juice Jacking - phone data theft

Post by Trader Joe » Sun Nov 17, 2019 5:40 pm

F150HD wrote:
Sun Nov 17, 2019 11:32 am
Considering how careful most BHs are using password managers to strengthen passwords etc and avoiding 2 factor authentication via text.....apparently another way to have your phone hacked is afoot.

LA officials issued the warning amid the rise of the scam known as "juice jacking."

In the scam, scammers load malware directly onto the public charging station or the cables that are left plugged in at stations. When you plug your device into the station, the malware would infect your smart phone, laptop or other device.

The malware could export your data or passwords directly to the scammer, putting you at risk.


Tech experts warn of 'juice jacking' ahead of busy holiday travel season


Image
I never use a password manager. Therefore, I have no concerns here.

Flyer24
Moderator
Posts: 1207
Joined: Sun Apr 08, 2018 4:21 pm

Re: Juice Jacking - phone data theft

Post by Flyer24 » Sun Nov 17, 2019 9:14 pm

Topic is now locked. Thread has run its course.

Locked