- TSA warns public USB ports can be loaded with malware that silently steals their data without detection
- “Juice Jacking” attacks can capture text messages, contact lists and even key pulsations from your device
- Free Wi-Fi cannot cost anything, but it could be the entrance door to lose its identity
While millions of Americans prepare for summer holidays, the United States Transportation Security Administration (TSA) has issued a timely warning alertness alert on criminal tactics designed to steal personal information.
The risk includes USB load stations features in airports and false public Wi-Fi networks.
The first, knows as “Juice Jacking”, sees cybercriminals install malware in public USB load stations: once a user connects on his phone, the committed port can silently transmit malware or extract device data.
Public USB ports and free Wi-Fi risks
The warning occurs in the midst of the main concerns about identity theft and digital surveillance as more people trust connected devices while traveling.
Although some skeptics argue that confirmed and generalized cases are rare, the theoretical risk remains a concern for cybersecurity professionals.
When a USB port serves the data and power functions, an attacker could modify the circuit or insert a small implant of data reflection within the terminal, which allows them to harvest contact lists, text messages and even key pulsations, depending on the vulnerability of the device.
To reduce exposure, the TSA recommends that travelers use their own wall adapters or energy banks, or simply avoid direct USB connections through non -reliable sources.
Another tactic marked by the TSA involves free Wi-Fi networks.
These so -called “Honeypot” networks seem legitimate, often called by the airport or the airline, but are controlled by criminals.
Once connected, the attacker can make a man attack in the middle, intercepting all the data transmitted by a traveler, including credit card numbers, passwords and commercial logs.
In more advanced cases, they could inject false web pages that deceive users to reveal credentials.
This attack can go through the strongest passwords and cause identity theft, therefore, it is important that users have their virtual private (VPN) networks and ensure that their devices are protected with the best identity robbery protection software.
If you must use a public Wi-Fi, the TSA warns that you should never “enter any confidential information while using WiFi not sure.”
This advice is aligned with broader recommendations that are often found in the best antivirus and end point protection guides, which often emphasize the security of the physical device in addition to digital safety tools.