{"id":24801,"date":"2024-07-01T09:10:17","date_gmt":"2024-07-01T17:10:17","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2024\/07\/01\/news-18531\/"},"modified":"2024-07-01T09:10:17","modified_gmt":"2024-07-01T17:10:17","slug":"news-18531","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2024\/07\/01\/news-18531\/","title":{"rendered":"Personal data stolen from unsuspecting airport visitors and plane passengers in \u201cevil twin\u201d attacks, man charged"},"content":{"rendered":"\n

The Australian Federal Police (AFP) have charged a man for setting up fake free WiFi access points in order to steal personal data from people<\/a>. <\/p>\n

The crime was discovered when an airline reported a suspicious WiFi network identified by its employees during a domestic flight. When the alleged perpetrator landed at Perth airport, his bags were searched and authorities found a portable wireless access device, a laptop, and a mobile phone in his hand luggage.<\/p>\n

The police say that the man, 42, used a portable wireless access device to create \u2018evil twin\u2019 free WiFi networks; so called because criminals set up free WiFi access points that mimic the name of legitimate public WiFi networks. <\/p>\n

When people tried to connect their devices to the free WiFi networks, they were taken to a fake webpage requiring them to sign in using their email or social media logins. Those details were then allegedly saved to the man\u2019s devices.<\/p>\n

The email and password details harvested could then be used to access more personal information, including bank accounts, emails and messages, photos and videos, and more.\u00a0<\/p>\n

AFP cybercrime investigators have identified data relating to the use of the alleged fraudulent WiFi pages at airports in Perth, Melbourne and Adelaide, on domestic flights, and at locations linked to the man\u2019s previous employment.<\/p>\n

The investigation is ongoing but the man can expect to face nine charges for the alleged cybercrime offences.<\/p>\n

‘Evil twin’ attacks are a type of \u201cmachine-in-the-middle<\/a>\u201d attack, where all traffic is routed through a server under the attacker’s control, giving them access to all of the submitted information.<\/p>\n

Cybercriminals favour places where people expect to have free WiFi, such as airports, planes, coffee, shops, and libraries. The attacker finds the legitimate network name\u2014known as the SSID (service set identifier)<\/a>\u2014and creates an access point with the same name.<\/p>\n

Access points and wireless router networks broadcast their SSIDs to identify themselves, but the identifiers are not unique. Your device can connect to any SSID if the network has no security options enabled, and it will not be able to differentiate between the legitimate and the fake one.<\/p>\n

Evil twin attacks are based on the fact that when two networks have the same SSID and security settings, your device will either connect to the one with the strongest signal or the one it sees first.<\/p>\n

How to stay safe from evil twin attacks<\/h3>\n

There are a few things you can do to protect yourself against this kind of attack.<\/p>\n