This charger boots out malware from your smartphone

Someday phone chargers—and anti-malware solutions—could be made this way, if this new two-in-one device works.

Meet the Skorpion smartphone charger by Kaprica, which scans the files of a phone while powering it up, to check for malware.

"For the user, the charger is simple: plug it into the wall, and plug the phone into the charger. The charger then conducts a quick preliminary scan of the phone; if all is in order, it shows a green light," said the Massachussetts Institute of Technology's Technology Review.

If the charger detects malware, it will show a red light and take action based on the user's preferences, such as trying to repair or restore the phone's system.

Even if the charger itself is compromised, it cannot add new apps or code to the phone, Kaprica cofounder and CEO Doug Britton said.

Britton had worked at defense contractor Lockheed Martin as a research and development manager, with security as his specialization.

While he did not specify what phones the charger will work with, he indicated its technology is "most developed for Android so far," Technology Review said.

The report added the company plans to launch with a handset maker that already makes both Android and Windows smartphones.

Thorough scan

The charger can start a scan at a predetermined time and analyze the phone's OS files for about four minutes.

No Wifi or data network connection is needed for the scan since it will be done locally.

However, the phone's wireless connection will be needed for downloading security updates.

Reverse tech?

The charger appears to be a reverse application of a demo by researchers at the annual Black Hat security conference earlier this year.

At the time, researchers showed how to add malware to an iPhone by connecting it to a modified malicious charger.

Kaprica said there is an advantage in a charger being physically separate from the smartphone, as it can better find malware that can embed itself in the OS.

Embedded malware can steal files or data, yet remain undetected by modifying key files.

Sales

Kaprica may start selling the Skorpion charger in late 2013 or early 2014 to enterprise customers for $65.

An added monthly subscription fee of $3 or $4 will provide for features like updates and alerts, MIT Technology Review said.

Technology Review said the charger will be co-branded with consumer electronics and accessory maker Belkin, which will make the device.

Concerns

But Xuxian Jiang, an associate professor of computer science at North Carolina State University, noted some concerns for the new technology.

He said the charger may not protect users from malware triggered by actions like answering a call.

Also, he said security updates the charger receives via the phone and its wireless network access may be intercepted. — VC, GMA News

“There’s no single bullet to all problems,” he said.