The Federal Communication Commission (FCC) and the Federal Bureau of Investigation (FBI) published two advisories that warn users about Juice Jacking and impersonation campaigns.
Based on reports, the Juice Jacking attacks could target anyone, but the impersonation attacks have targeted Chinese individuals living in the United States. Researchers stated that these advisories serve as a reminder and alert to raise awareness regarding the constant evolution of the threat landscape. Moreover, these warnings urge users to improve their cybersecurity.
The Juice Jacking attack leverages publicly accessible USB charging ports to infect unsuspecting users.
According to investigations, the cybercriminals that operate the Juice Jacking campaign exploit publicly available USB charging stations to drop malware into users’ devices. The cybercriminal operation runs by installing malware directly into the USB charging stations public in crowded places such as airports, shopping centres, malls, and hotels.
In several cases, the attack operators intentionally leave behind cables plugged in at charging stations to bait careless users. In addition, the FCC discovered that there had been reports of compromised USB cords being distributed by actors as promotional gifts.
Malware installed through these malicious USB ports could export personal data directly to an attacker-controlled server or lock a device entirely.
On the other hand, the FBI warns everyone about cybercriminals that impersonates Chinese law enforcement agencies and prosecutors from the PRC to defraud and bait Chinese users living in the United States.
The FBI emphasised that the scammers generate a sense of urgency and fear as they threaten users by endorsing a fake arrest warrant. This strategy results in tricking the targeted victims into giving their data.
FCC’s highlights on the recent Juice Jacking campaign show that users should carry their charger and USB cord to avoid these malicious charging ports. Furthermore, experts advise users to use an electric outlet instead of unsafe USB charging hubs.
On the other hand, the FBI suggest that users should be more meticulous in analysing unwanted communications from government sources that use intimidation tactics. These reminders could give users ideas on how to counteract such attempts from malicious actors.