FBI Warns Consumers Against Using Public Phone Charging Stations

2024-05-22 16:58:10

The FBI is advising consumers to avoid using public phone charging stations to protect their devices from malicious software. According to a recent tweet from the FBI’s Denver branch, public USB stations found in places like malls and airports are being exploited by bad actors to distribute malware and monitoring software. The agency did not

The FBI is advising consumers to avoid using public phone charging stations to protect their devices from malicious software.

According to a recent tweet from the FBI’s Denver branch, public USB stations found in places like malls and airports are being exploited by bad actors to distribute malware and monitoring software. The agency did not provide specific examples.

“Carry your own charger and USB cord and use an electrical outlet instead,” the FBI recommended in the tweet.

Although public charging stations are convenient when devices are critically low on battery, security experts have long warned about the associated risks. In 2011, researchers coined the term “juice jacking” to describe this issue.

“Just by plugging your phone into a [compromised] power strip or charger, your device is now infected, and that compromises all your data,” explained Drew Paik, formerly of security firm Authentic8, in a 2017 interview with CNN.

The charging cord you use also transfers data from your phone to other devices. For instance, when you connect your iPhone to your Mac with the charging cord, you can download photos from your phone to your computer.

If a port is compromised, there’s no limit to the information a hacker could access, Paik previously explained to CNN. This could include your email, text messages, photos, and contacts.

“The FBI regularly provides reminders and public service announcements in conjunction with our partners,” said Vikki Migoya, public affairs officer at the FBI’s Denver branch, in a statement to CNN. “This was a general reminder for the American public to stay safe and diligent, especially while traveling.”

The Federal Communications Commission also updated a blog post on Tuesday, warning that a corrupted charging port can allow a malicious actor to lock a device or extract personal data and passwords.

“In some cases, criminals may have intentionally left cables plugged in at charging stations,” the FCC blog post stated. “There have even been reports of infected cables being given away as promotional gifts.”