- The Transportation Security Administration recently warned travelers against the dangers of ‘juice jacking’—but it may not be as common as you think.
- When criminals use malware to infect public charging stations, they can cause juice jacking.
- Occurrences of juice jacking are rare, but possible—and it’s always a good idea to protect yourself, just in case.
When was the last occasion you used a USB charger at an airport? According to the Transportation Security Administration you should consider twice before charging your smartphone at one of these stations.
“Hackers are able to install malware on USB ports” (we have been told this is called “juice/port jacking ‘),” the TSA recently advised travelers on Facebook. “When you are at the airport, don’t plug your phone into a USB socket. Bring your TSA-compliant power brick “Plug in your battery pack.”
The warning has raised new concerns about “juice-jacking,” where cybercriminals install malware on charging stations in public to steal data.
What is the real threat to travelers on a daily basis? We spoke to a few experts.
Reality Check
Margot Cavin/Travel + Leisure
According to Calum BairdAs a digital expert in forensics, the theory of juice jacking seems more than theoretical. Baird, a digital forensics expert, says that he’s never seen any cases of juice jacking in his professional career despite the alarming online warnings.
Baird: “I’ve seen it online from time to time, but I believe that most modern smartphones require confirmation before data is transferred via USB.”
Baird points out that most modern devices come with built-in security features, even if they encounter compromised charging stations. Baird’s own experiences are backed up also by the Federal Communications CommissionThe FCC states on its website that while technically it is possible, they are not aware of any confirmed instances of juice jacking.
The real danger is the cables
Grace Cary/Getty Images
Danny Jenkins, CEO and cofounder of ThreatLockerThe article offers a different perspective on what travelers need to be concerned about and points out an unexpected source – deceptive USB C cables.
“Shady USB C Cables likely pose the greatest risk, in part because the dangers of charging ports at public places are better known,” he states.
Jenkins says that as people become more aware of public charging station dangers, they are less likely to use them. But many travelers aren’t hesitant to purchase a cheap charging cable These cables are more effective when purchased from a vendor who is questionable at an airport store or on the internet.
He says, “Attackers always look for new exploits.” While upcoming measures could mitigate issues related to “juice jacking,” vulnerabilities may still arise as attackers gain access and try to bypass protections.
How to protect yourself.
Margot Cavin/Travel + Leisure
Although it is hard to find any reports of actual cases of juice jacking it’s still a good thing to be extra cautious just in case. Jenkins states that portable battery packs Can help reduce the risk of an attack.
Jenkins suggests that if you have no other option but to use a public charger, look for signs of tampering in the USB port area. Baird suggests that you check your smartphone as you plug in.
He advises: “Never trust any device that you’ve already connected to.” “It does not require data transfer to be charged.”
Although juice jacking is largely a theoretical concept, the TSA takes a cautious approach because of the high traffic in airports and valuable data on devices. But modern smartphones come with built-in safeguards. A few simple precautions are all that is needed to reduce any risk.
Travelers who want to avoid public charging can do so safely by bringing along their own equipment, paying close attention to device instructions, and selecting cables and adapters carefully.
For most travelers, a dead battery on their phone is a bigger risk than being sucked dry of juice.
