An “Evil Twin” attack occurs when a hacker sets up a fake Wi-Fi network, often set up publicly, to allow as many users to connect as possible.

This summer, an Australian man was arrested for using this type of attack on domestic flights and at airports in Perth, Melbourne and Adelaide to steal social media or email login details.

small_rz_mg_8826.jpg
Cybercriminals are increasingly attacking public places with fake Wi-Fi networks such as airports. Photo: flughafen-zuerich

As the public becomes more accustomed to free Wi-Fi everywhere, Evil Twin attacks will become more common, according to Matt Rodolec, vice president of cloud and incident response at data security firm Varonis.

One thing that makes Evil Twin so dangerous is its ability to easily disguise itself. The device used in the attack could be very small and hidden behind a screen in a coffee shop, but it would have a big impact.

It serves up a fake version of a legitimate login website, tricking victims into entering their username and password. When nothing happens, people often assume that there is a problem with the Wi-Fi network and move on, unaware that their data is being collected.

People who have the habit of sharing information for many different accounts such as social networks, emails are very vulnerable. Once the information is exploited, it can be used to extract other data from the victim such as bank accounts.

Meanwhile, attackers only need less than $500 and some basic IT skills to take down users. They also do not need to fool everyone, just a few people falling for the trap is considered successful.

Experts recommend that in public places, users should use mobile data, personal hotspots (mobile hotspots) if possible. In addition, VPN applications also add a layer of security because data to and from the VPN is encrypted.

To ensure safety when using public Wi-Fi, users should note a few points: turn off automatic network connection, turn off Blueooth when in strange locations, turn off file sharing, use VPN, do not access sensitive services such as banking or enter personal information, activate two-step authentication...

(According to CNBC)