- The TSA warns that public USB ports can be loaded with malicious software that silently fly your data without detection
- “JUICE JACKING” attacks can capture text messages, contact lists and even strikes from your device
- Free Wi-Fi may do not cost anything, but it could be the gateway to lose your identity
While millions of Americans are preparing for the summer holidays, the US Transportation Security Administration (TSA) has published an alert warning in time of timely time of criminal tactics designed to steal personal information.
The risk includes falsified USB charging stations in airports and false public Wi-Fi networks.
The first, known as “Juice Jacking”, sees cybercriminals install malware on public USB charging stations – once a user branches his phone, the compromised port can silently transmit malware or extract data from the device.
Public USB ports and free Wi-Fi risks
The warning comes in the midst of increased concerns regarding identity theft and digital surveillance, as more and more people rely on connected devices when traveling.
Although some skeptics maintain that the widespread, confirmed cases are rare, the theoretical risk remains a concern for cybersecurity professionals.
When a USB port serves both data and supply functions, an attacker can modify the circuit or insert a small data sniffing implant inside the terminal, which allows them to harvest contact lists, text messages and even strikes, depending on the vulnerability of the device.
To reduce exposure, the TSA recommends that travelers use their own wall adapters or electric banks, or simply avoid direct USB connections via unreliable sources.
Another tactic reported by the TSA involves free public Wi-Fi networks.
These so-called “jar of honey” networks seem legitimate, often named after the airport or the airline, but are controlled by criminals.
Once connected, the attacker can make a man’s attack in the community, intercepting all the data that a traveler transmits, including credit card numbers, passwords and commercial connections.
In more advanced cases, they could inject false web pages that induce users to reveal identification information.
This attack can go through the strongest passwords and cause an identity theft, therefore, it is important that users have their virtual private networks (VPN) and ensure that their devices are protected by the best protection software against identity theft.
If you need to use public Wi-Fi, the TSA warns that you should never “enter sensitive information while using unsecured WiFi”.
These tips align with wider recommendations often found in the best protection guides against antivirus and terminals, which frequently emphasize the safety of physical devices in addition to digital safety tools.