NEW CHOICEJACKING ATTACK STEALS DATA FROM PHONES VIA PUBLIC CHARGERS

Summary from the TLDR InfoSec newsletter

Choicejacking is a new attack that bypasses smartphone security prompts by spoofing USB or Bluetooth input devices to simulate user actions in under 133 milliseconds. The attack tricks phones into enabling data transfer mode without consent, allowing attackers to access photos, messages, and install malware through compromised public charging stations. Unlike traditional juice jacking attacks, Choicejacking exploits device communication protocols to simulate keyboard input and overflow input buffers, affecting both Android and iOS devices.