Malicious Chargers Exploit Phones via ChoiceJacking | JQJO

Researchers have revealed ChoiceJacking, a new attack exploiting vulnerabilities in Android and Apple devices through malicious chargers. These chargers act as USB hosts, triggering confirmation prompts and injecting input events to mimic user actions. By exploiting USB Power Delivery and Bluetooth, the charger gains access to files and user data. The attack works on most tested devices, taking approximately 25-30 seconds to establish a connection. One Android device with limited USB PD support was unaffected.