Read, Watch or Listen

Researchers have revealed ChoiceJacking, a new attack exploiting vulnerabilities in Android and Apple devices through malicious chargers. These chargers act as USB hosts, triggering confirmation prompts and injecting input events to mimic user actions. By exploiting USB Power Delivery and Bluetooth, the charger gains access to files and user data. The attack works on most tested devices, taking approximately 25-30 seconds to establish a connection. One Android device with limited USB PD support was unaffected.

Prepared by Jonathan Pierce and reviewed by editorial team.