News Insights: LA warns of ‘juice-jacking’ malware, but admits it has no cases – TechCrunch

News Insights:

James McQuiggan, Security Awareness Advocate, KnowBe4:

“Smartphones and tablets are wonderful devices and people rely on them for email, pictures or social media.Plugging into a public charger that has been compromised by attackers can lead to data can be stolen without the person’s knowledge.  This potentially can lead to identity theft, spear phishing attacks and damage to your personal reputation. Using a portable charger reduces the risk of losing your data while still keeping your device charged.  The cost of a portable charger is far less than the cost of losing your identity, personal pictures or your reputation by using a public charging station. Add a portable charger to your diaper bags, backpacks or your travel bags to avoid unnecessary use of a public charger. People need to be their own human firewalls for their smartphones and avoid the public chargers by carrying a portable charger.”

Javvad Malik, Security Awareness Advocate, KnowBe4:

“The risks associated with public USB charging ports has been known for some time. Although, there is no real evidence to suggest it is a likely attack method beyond a proof of concept. For many criminals, tampering with a public charging port can be a risky proposition which is not worth the effort. Setting up a malicious wifi hotspot is a far more effective way to intercept traffic in public places. At most the compromising of USB ports may be a tactic used to target specific individuals, executives, or politicians. But for that group of people, there should already be counter measures already in place for a broad range of attacks. For people that are worried about this kind of attack, an alternative could be to use public USB charging ports to only charge an external battery pack, and then use that to charge their device so that the device is never directly connected to the USB port”