Malicious Chargers Exploit Phones via ChoiceJacking
Tap title to read story
Researchers have revealed ChoiceJacking, a new attack exploiting vulnerabilities in Android and Apple devices through malicious chargers. These chargers act as USB hosts, triggering confirmation prompts and injecting input events to mimic user actions. By exploiting USB Power Delivery and Bluetooth, the charger gains access to files and user data. The attack works on most tested devices, taking approximately 25-30 seconds to establish a connection. One Android device with limited USB PD support was unaffected.
Researchers have revealed ChoiceJacking, a new attack exploiting vulnerabilities in Android and Apple devices through malicious chargers. These chargers act as USB hosts, triggering confirmation prompts and injecting input events to mimic user actions. By exploiting USB Power Delivery and Bluetooth, the charger gains access to files and user data. The attack works on most tested devices, taking approximately 25-30 seconds to establish a connection. One Android device with limited USB PD support was unaffected.
More context
Sources
JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.
