// THREAT DETECTION AND DATA PRIVACY TERM
Juice Jacking
Juice jacking is a type of cyberattack where a criminal uses a public USB charging port, like those in airports or cafes, to install malware on your device or steal data from it. While you think you're just charging your phone, the compromised port is secretly accessing your information.
TECHNICAL DEFINITION
Juice jacking is a physical access cyberattack vector involving the compromise of public USB charging stations to install malware or exfiltrate sensitive data from connected mobile devices, such as smartphones and tablets. The attack exploits the dual power and data transfer capabilities of USB interfaces to breach device security when a user connects for a power charge.
BACKGROUND
The United States Department of Homeland Security (DHS) is the U.S. federal executive department responsible for public security, comparable to interior ministries abroad. Its missions involve anti-terrorism, civil defense, immigration and customs, border control, cybersecurity, transportation security, maritime security and sea rescue, and the mitigation of weapons of mass destruction.
READ MORE ON WIKIPEDIASYNONYMS & ALIASES
- USB charging attack
- malicious charging kiosk
- data-stealing charger
- compromised USB port
- video jacking
- USB data theft
USAGE NOTE
To prevent juice jacking, security experts recommend using AC power adapters, portable power banks, or USB data blockers instead of public charging kiosks.
DEVELOPERS
Organizations developing technology related to Juice Jacking.
A UK-based company specializing in USB charging solutions, widely known for creating and popularizing the USB Data Blocker, a hardware device that plugs in-line with a charging cable to physically block the data pins and prevent juice jacking.
An American company focused on mobile device security that developed the Juice-Jack Defender, a popular USB data blocker specifically marketed to protect individuals and organizations from data theft at public charging stations.
The brand behind one of the original and most well-known USB data blockers, also known as the 'USB Condom'. This device, developed by cybersecurity firm Xipiter, physically disconnects the data pins in a USB connection to allow for safe, power-only charging.
A company developing hardware-based security accessories for smartphones, such as the SafeCase. This product provides advanced protections including the ability to physically block the USB data port, offering a robust defense against juice jacking and other data exfiltration attempts.
A global manufacturer of IT connectivity parts that produces a wide array of hardware solutions, including charge-only or 'power-only' USB cables that are intentionally manufactured without data wires, serving as a simple and effective defense against juice jacking.
A mobile security company providing software-based threat defense for individuals and enterprises. Its platform can help detect and protect against malware or spyware that could be installed via a compromised USB connection during a juice jacking attack.
An enterprise endpoint management company focused on the Apple ecosystem. Its mobile device management (MDM) platform allows administrators to enforce security policies on corporate devices, such as restricting USB data connections to prevent unauthorized access and mitigate threats like juice jacking.