Charging in public places? Watch out for “juice jacking”

Airports, hotels, cafés, even shopping malls, offer public charging points where you can boost your phone or laptop battery on the go.

They’ve been in the news after the FBI recently tweeted advice to stop using them. Crooks have figured out how to hijack USB ports to install malware and monitoring software onto devices as they charge.

The security risk of “juice jacking” was long thought to be more theoretical than real, but the tech needed to carry out an attack has gotten smaller and cheaper and easier to use. This means less sophisticated criminals are now turning their hand to it.

So how does it work?

The most common charging cables – USB-C and lightning – are dual-purpose. They have pins for charging and pins for data.

When you charge your device, you only use the charging pins. But a compromised charging port – or a cable that someone has left behind – could use both charging pins and data pins without you knowing.

When they use the data pins, criminals can install malware onto your device that gives them access to your credentials and other data. It’s a little like plugging your phone into someone else’s laptop.

To avoid the risk, the best solution is to always carry your own charger and cable, and plug it into a power outlet. If you have no choice but to use a public USB port, invest in something called a USB data blocker. This prevents data being transferred, but the device will still charge.

We help businesses stay secure and productive at the same time.

If we can help you, get in touch.

RELATED POSTS

Is Edge your business’s browser of choice? Microsoft’s thinking of automatically opening Copilot when you use it. It could boost productivity, but there are privacy concerns to be aware of…
Weak passwords are one of the biggest security risks to your business. Why? Because cyber criminals are getting smarter than ever before. If they manage to crack just one password, they could gain access to your sensitive business data, financial information, or even gain control of your entire system. Cyber criminals use automated tools to guess passwords, allowing them to try out millions of combinations in seconds. So, if you’re using something like “Password123” or “CompanyName2025”, you’re practically handing them the keys to your business. A compromised password can lead to big issues, such as: • Data breaches • Financial losses • Identity theft • Reputation damage But how do you create strong passwords without driving yourself (and your team) mad? Think of your password like a secret recipe, where only you should know the ingredients. It should: • Be at least 14 characters long (the longer, the better) • Include a mix of uppercase and lowercase letters • Contain a few numbers and symbols (like @, $, %, or &) • Not contain any common words or easily guessable information (like birthdays, names, or the word “password”) Instead of using a single word, you could try a passphrase – a short, random sentence that only you would understand. For example, instead of “Sailing2025”, try something like “Coffee&CloudsAreGreat9!”. This is much harder to crack, yet still easy to remember. You should also steer clear of these common mistakes: • Using personal info (your name, birthday, business name, etc.) • Reusing the same passwords across multiple accounts • Using simple sequences (“123456” or “abcdef”) • Storing passwords in an easily accessible place (like a sticky note on your desk) If remembering unique passwords for every account sounds impossible, there is another option: Password managers. These generate strong passwords, store them securely and autofill them for you. With a password manager, you only need to remember one strong master password for the manager app itself. The rest are encrypted and stored safely, reducing the risk of data breaches. Even the strongest password isn’t foolproof, which is why multi-factor authentication (MFA) is also important. MFA requires a second form of verification, like a one-time code sent to your phone or generated from an authentication app. If you have employees accessing your business systems, it’s a good idea to have a password policy in place to explain your rules and why they’re important. This should include: • Unique passwords for each system and account • Regular security training on password best practices • Business-wide use of MFA for critical systems • Scanning for compromised passwords regularly By making password security a priority, you can reduce the chances of a cyber attack creating a nightmare for your business. And if you need help making your business more secure, get in touch.

Share this article?

Leave a Comment

Your email address will not be published. Required fields are marked *

RELATED POSTS

Weak passwords are one of the biggest security risks to your business. Why? Because cyber criminals are getting smarter than ever before. If they manage to crack just one password, they could gain access to your sensitive business data, financial information, or even gain control of your entire system. Cyber criminals use automated tools to guess passwords, allowing them to try out millions of combinations in seconds. So, if you’re using something like “Password123” or “CompanyName2025”, you’re practically handing them the keys to your business. A compromised password can lead to big issues, such as: • Data breaches • Financial losses • Identity theft • Reputation damage But how do you create strong passwords without driving yourself (and your team) mad? Think of your password like a secret recipe, where only you should know the ingredients. It should: • Be at least 14 characters long (the longer, the better) • Include a mix of uppercase and lowercase letters • Contain a few numbers and symbols (like @, $, %, or &) • Not contain any common words or easily guessable information (like birthdays, names, or the word “password”) Instead of using a single word, you could try a passphrase – a short, random sentence that only you would understand. For example, instead of “Sailing2025”, try something like “Coffee&CloudsAreGreat9!”. This is much harder to crack, yet still easy to remember. You should also steer clear of these common mistakes: • Using personal info (your name, birthday, business name, etc.) • Reusing the same passwords across multiple accounts • Using simple sequences (“123456” or “abcdef”) • Storing passwords in an easily accessible place (like a sticky note on your desk) If remembering unique passwords for every account sounds impossible, there is another option: Password managers. These generate strong passwords, store them securely and autofill them for you. With a password manager, you only need to remember one strong master password for the manager app itself. The rest are encrypted and stored safely, reducing the risk of data breaches. Even the strongest password isn’t foolproof, which is why multi-factor authentication (MFA) is also important. MFA requires a second form of verification, like a one-time code sent to your phone or generated from an authentication app. If you have employees accessing your business systems, it’s a good idea to have a password policy in place to explain your rules and why they’re important. This should include: • Unique passwords for each system and account • Regular security training on password best practices • Business-wide use of MFA for critical systems • Scanning for compromised passwords regularly By making password security a priority, you can reduce the chances of a cyber attack creating a nightmare for your business. And if you need help making your business more secure, get in touch.
Ever clicked an online ad and wondered afterwards if it was a scam?… most of us have – and cyber criminals want us to keep doing it. Here’s what to look out for to stop your business’s data (and profits) falling into the wrong hands…
Scroll to Top