Security Threats to Mobile Devices through Untrusted Chargers

Abstract

Abstract Mobile devices face growing security threats, including risks from untrusted chargers. This research explores how untrusted chargers can exploit vulnerabilities in mobile devices, particularly focusing on data theft through USB connections. The study aims to evaluate the impact of different Android security settings and assess the risks posed by compromised chargers, including advanced attack tools like the O.MG cable. Experiments were conducted using three Android devices SKY DEVICES E55, Samsung Galaxy J4, and Samsung Galaxy S Duos 3 along with an additional device - Galaxy Tab A9 (SM-X110) tested with an O.MG cable. The study was conducted in four phases to assess security vulnerabilities. Initially, devices were tested under default security settings to observe their normal performance. The second phase evaluated risks associated with enabling developer mode and USB debugging. In the third phase, an O.MG cable was used with an unlocked phone to examine the potential for unauthorized data extraction through an untrusted charger. Finally, the effectiveness of the device lock screen was tested by attempting data theft with a locked phone. Tools like Vysor for remote access, ADB platform tools for device communication, and Scrcpy for screen mirroring were used, enabling the successful extraction of sensitive information such as text messages, photos, and emails. The results revealed significant vulnerabilities, such as unauthorized data access and the potential for malware injection. Devices with developer mode and USB debugging enabled were found to be highly vulnerable to attacks, while locked devices with disabled debugging provided a stronger defense. The study highlights the importance of securing mobile devices by disabling USB debugging, locking devices while charging, and increasing user awareness of these risks