@acdha @glyph I suppose the difference is that the monetization strategy for credit card skimmers is straightforward, and in the pre-chip days it was pretty valuable to skim ~1000 cards or whatever.

Compromising random phones is probably not especially valuable even if juice jacking worked 100% of the time, and your hit rate is probably lower than what you’d get by tricking people into installing something via some other mechanism. The fact that it’s mostly been mitigated on the software side probably makes it not cost-effective.