Cyber Risks · Krebs on Security

Beware of Juice-Jacking

Summary: At DefCon 2011, researchers Brian Markus, Joseph Mlodzianowski and Robert Rowley built a free charging kiosk that logged at least 360 attendees plugging in their smartphones over three and a half days, and the kiosk's screen switched to a red warning that public kiosks can retrieve or download information without consent. Markus said most smartphones are configured to connect and dump off data, and one attendee who claimed USB transfer was off saw his phone instantly enter USB transfer mode when plugged in.

What you should know: At least 360 security professionals connected to a kiosk built by the people behind the Wall of Sheep, and one attendee's boss responded by banning charging kiosks company-wide and requiring employees to carry power cables or extra batteries on travel.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related