Cyber Risks · Krebs on Security

Road Warriors: Beware of ‘Video Jacking’

Summary: Researchers Brian Markus, Joseph Mlodzianowski and Robert Rowley demonstrated "video jacking" at DEF CON, using custom electronics hidden in a fake USB charging station to split a phone's video display and record everything tapped, typed or viewed while plugged in, including PINs and passwords. The attack worked on HDMI-ready Android phones from Asus, Blackberry, HTC, LG, Samsung and ZTE with no on-screen warning, and Markus later tested it at an Apple store where an iPhone 6 home screen appeared on the store display using a Lightning digital AV adapter.

Key Takeaway: The full rig cost about $220 minus the monitor, and the researchers note it could be planted at a hotel, airport, pub or trade show to harvest credentials and trade secrets from unsuspecting attendees.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related