FBI Warns Against Using Public USB Ports Due to Malware Risk

Re:FBI Warns Against Using Public USB Ports Due to Malware Risk by iavael on Wednesday April 12, 2023 @05:16AM (#35536902)

That only works if other endpoint tries to act as usb host. While if it mimics usb device (classic BadUSB), then AFAIK any phone would accept without any questions.

[ Parent | on HN ]

Re:FBI Warns Against Using Public USB Ports Due to Malware Risk by NavinF on Thursday April 13, 2023 @06:25AM (#35553367)

Classic BadUSB acts as a keyboard and opens a terminal on your PC. What exactly can a bad usb device do to a phone?

This whole thread is bizarre. A whole lot of fretting over an attack that nobody bothered to describe.

[ Parent | on HN ]

Re:FBI Warns Against Using Public USB Ports Due to Malware Risk by iavael on Sunday April 16, 2023 @07:03PM (#35595011)

It can act like keyboard an mouse that are valid input devices on phones too. With control of user input badusb device can download and install malware on the phone.

[ Parent | on HN ]

Re:FBI Warns Against Using Public USB Ports Due to Malware Risk by NavinF on Wednesday April 19, 2023 @02:10AM (#35624801)

Now we're just taking in circles. What exactly can a malicious USB device do to a phone? On Windows it can press Win+R, but there's no equivalent on mobile.

Which keystrokes are you talking about and on which OS does that attack work? I can't think of anything that would work on my iPhone.

[ Parent | on HN ]

Re:FBI Warns Against Using Public USB Ports Due to Malware Risk by iavael on Sunday April 23, 2023 @06:08PM (#35681166)

Open chrome (swipe up with virtual mouse, type chrome, click first entry), focus on address bar, input url of malicious apk, download it, open, confirm installation from unknown source.

[ Parent | on HN ]