© 2024
Virginia's Public Radio
Play Live Radio
Next Up:
0:00
0:00
0:00 0:00
Available On Air Stations

Need to charge your phone? Think twice — 'juice jackers' might come for you

The charging station at Pearson International Airport, one of the busiest transportation hubs in Canada.
Roberto Machado Noa
/
LightRocket via Getty Images
The charging station at Pearson International Airport, one of the busiest transportation hubs in Canada.

The U.S. government is warning of the dangers of using public, free cellphone charging stations, such as airports, hotels and shopping centers. The FCC put out a statement, and local branches of the FBI are also expressing concern.

That's because cybercriminals are using the USB cables at these charging stations to hack into phones while they're charging.

Cybersecurity analyst Brian Krebs first coined the term "juice jacking" in a 2011 blog post, to refer to hacking into phones to steal data or infect them with malware.

"Juice jacking is basically a portable charger or a charger out there in the public that's been designed to look real," says Jim Stickley, a cybersecurity expert, told NPR. "It will actually charge your phone, but it's also either installing malware on your phone or stealing data off of your phone or other mobile device."

Stickley also told NPR that building these fake charging stations is pretty easy. He should know — he built one himself. He specializes in executing hacks and cybercrimes to assess companies' vulnerabilities, and says it took him only about an hour "to make the stand, get it set up and have it fully operational."

Most people do not think of a phone charging kiosk as a potential danger zone. As Krebs put it in that 2011 post, "Do you hesitate before connecting your phone to this unknown device that could be configured to read most of the data on your phone, and perhaps even upload malware? The answer, for most folks, is probably not."

While juice jacking is not new, Stickley suggests it's becoming more prevalent, possibly due to the increase in travel now that the COVID-19 restrictions have mostly been lifted.

"Wherever you see a lot of tourists, [you could] plant one of these devices," he warns.

So if you're feeling freaked out, here are four ways to avoid getting juice jacked:

  1. Carry a portable battery charger of your own.
  2. Use a USB device called a data blocker that connects to your phone's charging cable.
  3. Use the wall plug-in socket to charge your phone.
  4. Completely power off your device before plugging it into a cellphone charging kiosk.

Copyright 2024 NPR. To see more, visit https://www.npr.org.

Ben Abrams
Ben Abrams is a production assistant with NPR's Morning Edition. He joined the show in May 2022 after interning with NPR, Atlanta Civic Circle and Georgia Public Broadcasting, an NPR affiliate in Atlanta.
Miranda Kennedy
Miranda Kennedy is a supervising editor on Morning Edition. She leads political coverage, manages the show's editorial content, and plans stories for the daily program. In her role, she has led live coverage with David Greene following the 2015 Paris attacks and reported from China with Steve Inskeep for two weeks in 2017.