iPhone and Android owners warned over ‘juice jacking’ charging mistake that downloads malware straight onto your device
SMARTPHONE-wielding travellers have been warned against an “underestimated” ‘juice jacking’ attack that can take place in hotels.
‘Juice jacking’ is when innocent iPhone or Android owners charge their devices through a USB port that has been tampered with – and hotels aren’t the only place you’re at risk.
These dodgy USB ports can be used to physically plug hackers into your phone, where they can access your personal data, like card details, addresses and names.
Consumers have long been warned against using USB cables and charge points in public places, like airports, translations, pubs and restaurants.
This is because, as founder of cybersecurity firm TorGuard, Ben Van Pelt, says: “They’re all vulnerable.”
Yet, despite hotels being deemed more ‘private’ than ‘public’, Van Pelt told The Sun: “The risk shouldn’t be underestimated.
“Hotels are often a prime target for cybercriminals due to the constant flow of guests with sensitive data, and USB ports are not the only risk source.”
Ten years ago, hotels in Asia were targeted by a spear-phishing spyware and malware-spreading campaign that attacked business hotel visitors through the hotel’s Wi-Fi network.
“There was a major incident back then known as the DarkHotel Attacks,” Ven Pelt explained. “Where a group of hackers targeted high-profile individuals staying in luxury hotels across Asia by exploiting weaknesses in hotel Wi-Fi networks to install malware on guests’ devices.”
While it might be tempting to ditch your travel adaptors and rely solely on the hotel’s USB ports, Van Pelt has urged against it.
“If you connect your phone to a USB port, there’s a risk that hackers could install malware on your device,” he said.
It is “difficult” to know if the USB charging port in your hotel room is risky, but Van Pelt reckons there “may be signs”.
“If the charging port looks damaged, tampered with, or out of place, avoid using it,” he said.
“If you notice unusual behaviour on your device while charging, such as unexpected app installations or slow performance, it might be infected.”
Three tips to avoid 'juice jacking'
'Juice jacking' is when hackers sneakily install malware onto smartphones and PCs while their batteries are charging.
This can be done through a dodgy cable, or an USB port that’s been tampered with.
Smartphone owners are warned against using USB cables and charge points in places like airports, translations, hotels, pubs and restaurants.
Founder of cybersecurity firm TorGuard, Ben Van Pelt, told The Sun that consumers can keep themselves safe from ‘juice jacking’ with these three tips:
- Pack a power bank or USB data blocker for on-the-go charging.
- Check the USB charging port for any marks, scratches, ill-placement and looks properly secured to the wall.
- Use a USB data blocker.