ChoiceJacking via Malicious Chargers

Description

This study introduces ChoiceJacking, a new class of USB-based attacks that bypass existing defenses against Juice Jacking. Unlike previous assumptions, the researchers show that malicious chargers can simulate user input to enable unauthorized data access on both Android and iOS devices. Tests with a low-cost, custom-built charger revealed that sensitive data could be accessed on devices from 8 major manufacturers—including locked devices in some cases. The attack can even detect optimal moments using power signal analysis to avoid detection. Most affected vendors, including Apple, Google, and Samsung, have acknowledged the issue and are working on fixes.

Period	26 Jun 2025
Event title	IKT-Sicherheitskonferenz
Event type	Conference
Location	Dornbirn, AustriaShow on map
Degree of Recognition	National