Security News Wi-Fi honeypots: Alive and well at RSAC 2018

LASER_oneXM

Level 37
Thread author
Verified
Top Poster
Well-known
Feb 4, 2016
2,520
From hacking iOS to why security matters when it comes to Wi-Fi, wireless threats were the topic of several talk-tracks this year. We’re all guilty of connecting to unsecured public Wi-Fi at times. We connect at the Airport, coffee shop, and even at venues like RSAC. And as the growth and popularity of Wi-Fi continues to climb, it’s important that we understand the risks that come with connecting to public Wi-Fi, or even offering Wi-Fi to employees, visitors and guests.

To show just how often Wi-Fi security is an afterthought for most people, we set up a honeypot access point offering free open Wi-Fi network for RSAC attendees. Unsurprisingly, conference-goers connected to our Wi-Fi network with their smartphones, tablets, laptops and smartwatches—each broadcasting their MAC address, device make and model, and IP address to our access point.
... ... ...
A typical Wi-Fi attack takes less than two minutes! The information gathered by our honeypot from RSAC attendees and the length of time they remained connected would be more than enough for a criminal hacker to conduct a man-in-the-middle (MitM) attack to hack each and every one of these connections and steal valuable information like usernames, passwords, and even credit card numbers. Of course, this exercise was simply put in place for educational purposes – none of these RSAC attendees were in danger of such an attack, and everyone was able to enjoy secure internet connection.

The key lesson here is that hacking Wi-Fi is easy, and tricking users into connecting to malicious access points is even easier. So, what can Wi-Fi users and businesses do to help protect against Wi-Fi security threats?

Wi-Fi security tips for those remote employees and business travelers

1. Don’t connect to public Wi-Fi SSIDs if multiple variations are broadcasted – this is not normal for a legitimate business.

2. When you need to access something such as your bank account or a confidential corporate report, consider disabling Wi-Fi and using your 4G connection. Once you’ve wrapped up the confidential task, feel free to hop back on Wi-Fi.

3. Clear your saved Wi-Fi network names from each of your devices and consider disabling the “auto-connect” feature in your device settings.

Wi-Fi security tips for business owners and IT departments

Your visitors, guests and employees demand Wi-Fi access, but a wireless internet connection alone isn’t good enough if it’s not designed to protect users from hackers.

.... ..... ..... .....
....
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top