No Free Charge Theorem 2.0: How to Steal Private Information from a Mobile Device Using a Powerbank

While not long time ago users were seeking constant Internet connection (e.g., via free Wi-Fi hotspot), now they also look for energy sources to recharge their smartphones' battery, due to the use of more energy-draining apps (e.g., Pokémon Go).

This phenomenon has led to the diffusion of free charging stations in public places and the marketing of portable batteries a.k.a. powerbanks. Despite the preventive measures implemented by Android's developers in order to prevent data transfer via USB cable (i.e., "Charging only" mode), we are able to exploit a hidden communication channel which leverages only the electrical current provided for charging the smartphone.

By Riccardo Spolaor, Riccardo Bonafede, Veelasha Moonsamy &
Mauro Conti

Full Abstract & Presentation Materials:

Powerbank