The FBI is warning consumers not to use public phone charging stations

The FBI is warning consumers not to use public phone charging stations

The FBI is warning users not to use public phone charging stations to avoid exposing their devices to malicious software.

Public USB stations like the kind found in shopping malls and airports are being used by bad actors to spread malware and surveillance, according to a tweet last week from the FBI’s Denver branch. The agency did not provide any specific examples.

“Bring your own charger and USB cord and use an electrical outlet instead,” the agency advised in the tweet.

While public charging stations draw crowds when devices run critically low on battery, safety experts have for years raised concerns about the risk. In 2011, researchers coined the term “juice jacking” to describe the problem.

“Just by plugging your phone into a [compromised] power strip or charger, your device is now infected, and that affects all your data,” Drew Paik, formerly of security firm Authentic8, explained to CNN in 2017.

The cord you use to charge your phone is also used to send data from your phone to other devices. For example, when you plug your iPhone into your Mac with a charging cord, you can download photos from your phone to your computer.

If a port is compromised, there is no limit to the information a hacker can retrieve, Paik previously explained to CNN. That includes your emails, text messages, photos and contacts.

“The FBI regularly issues alerts and public service announcements with our partners,” Vikki Migoya, public affairs officer at the FBI’s Denver branch, told CNN. “This is a general reminder for the American public to stay safe and diligent, especially while traveling.”

The Federal Communications Commission also updated a blog post on Tuesday warning that a faulty charging port could allow malicious actors to lock devices or extract personal data and passwords.

“In some cases, criminals may intentionally leave cables attached to charging stations,” according to an FCC blog post. “There are even reports of infected cables being given as promotional gifts.”