IOS AND ANDROID JUICE JACKING DEFENSES HAVE BEEN TRIVIAL TO BYPASS FOR YEARS

Summary from the TLDR InfoSec newsletter

Juice jacking attacks are when an attacker hides a malicious device inside a USB charging cable that either runs malware or downloads files upon connecting to a target. Apple and Android have attempted to mitigate this risk by requiring users of phones to confirm that they want to allow access to their files. A new attack first connects as a USB input device and pairs as a Bluetooth keyboard. It then uses USB PD Data Role swap to connect as a USB host and accesses files by using the Bluetooth keyboard to accept prompts.