The threat of juice jacking

Abstract

Cyber attacks can affect the confidentiality, integrity and availability of data/ systems. Some attacks aim to steal data whereas others try cause destruction. One such vulnerability stems from the malicious use of USB chargers. When travelling and our smartphone battery level is very low, users may find a nearby charging station. However, users need to think twice before simply plugging in their device. What seems like an innocent charge could turn into a golden opportunity for attackers. Malware could actually be introduced into smartphones and other devices through the USB charger. Juice jacking is emerging as a potential risk as cyber criminals aim to infect users and potentially steal their passwords and infiltrate bank accounts. Users could even get locked out of their devices. This paper takes a closer look at this developing threat. These public charging stations are now being fraudulently used by attackers to gain access to sensitive information. Scammers are now using USB chargers as a method to steal data or install malware. However, users may be unaware of the potential risk. In this research, the malicious use of USB charging stations found in spots popular with travellers are revealed. In addition, protective measures are described in order to help users from falling victim to this latest cyber threat. Attackers try to take advantage of the situation in that most users trust their mobile devices more than their desktop devices. In addition to data theft, malicious attackers could also cause destruction of our mobile devices. When fast charging, malware could be installed onto a mobile device overwriting its firmware and arming it as a weapon. The firmware could be overwritten and the phone overloaded. The charger is thus compromised and used to overload a device. These various attack vectors are discussed in the paper to show the danger of juice jacking.