Hacking public Wi-Fi

1 February 2018 Editor's Choice, Information Security, Infrastructure

Public Wi-Fi is great in so many ways. It costs nothing, saves on mobile data, and is often faster when it comes to downloading. However, as much as we love the convenience, hackers love public Wi-Fi too, and for different reasons.

Nastassja Poorter, enterprise sales director at DRS, a Cognosec AB company, says there are several ways cyber crooks can access an individual’s private information and even steal their identity or capture their banking logins through public Wi-Fi.

One of the ways in which they can do this, is through Man-in-the-Middle (MITM) attacks, during which a hacker intercepts communications between two parties. While they may think their communications are private and that data is being shared directly between the server and the client, the link is, in fact, being intercepted by a third-party. The attacker can then alter the communication and display, for example, a fake or phishing website or send a message of his own.

“Public Wi-Fi is particularly susceptible to attacks of this nature due to the fact that any HTTP site data being transmitted is unencrypted, effectively rendering your data public. Through compromised routers, attackers can steal reams of personal information and give them access to financial logins, private messages, user names and passwords. People should never, under any circumstances, do online banking transactions or share any personal information with others while using public Wi-Fi.”

So what can users do? Check for secure sites, ones that have https:// instead of just http in front of them. “Certificates denoted by the ’s’ mean the website is more secure, and offers a decent level of encryption, so only use such sites when accessing personal information,” says Poorter.

The next thing users of public Wi-Fi need to be aware of are ‘Evil Twin’, or fake, Wi-Fi connections. In these attacks, a cyber criminal sets their service identifier (SSID) to be the same as an access point (AP) at the local hotspot or wireless network. He can then disrupt or disable the genuine AP by disconnecting it, directing a denial of service attack against it, or creating radio frequency interference around it. This is particularly cunning, as it bypasses any security systems a public Wi-Fi hotspot might have in place.

She advises users to be very suspicious should two network connections show up that have a similar name, and if possible, make use of a virtual private network (VPN). This will establish a level of encryption between the user and a website, so any data that could potentially be intercepted is unreadable to a cyber criminal unless they have the decryption key, which they don’t.

According to Poorter, the next danger associated with public Wi-Fi is packet sniffing. “Every time there is data transmitted over the Internet, irrespective of whether it’s an email, Google search or retail transaction, the data is broken down into digital information that is sent in data packets. The packets are labelled and addressed with instructions explaining where they are going to. Millions of data packets move between destinations all the time, uninterrupted,” she explains.

“However, and here’s the caveat: If someone has installed sniffing hardware or software somewhere on the network, they can eavesdrop, snatch that data in mid-transmission just long enough to ‘sniff’ or inspect it, and if found to be interesting or valuable, quickly capture and copy it before sending it on its way. This is done without anyone being the wiser. Packet sniffing is like wiretapping for the Internet.”

Packet sniffers can read emails, see passwords, view your Web history and, more alarmingly, capture account information such as logins and credit card numbers in detail. “Again, I recommend turning to strong encryption, in the form of a VPN to avoid this,” says Poorter.

Another danger of public Wi-Fi is sidejacking, or session hijacking. In these instances, an attacker will essentially steal a user’s access to a website by using a packet sniffer to get their hands on an unencrypted cookie that grants access to the site in question. This technique allows the cyber crook to impersonate the user, as the session cookie is already providing access to the website’s content. Alarmingly, sidejacking bypasses encryption to some degree.

Poorter says although attackers can’t read a password through this technique, they could still download malicious software that could, and get their hands on enough information to make stealing your identity a breeze. “Again, make use of https:// and VPNs to secure against this type of threat.”





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Open source code can also be open risk
Information Security Infrastructure
Software development has changed significantly over the years, and today, open-source code increasingly forms the foundation of modern applications, with surveys indicating that 60 – 90% of the average application's code base consists of open-source components.

Read more...
Fastest PCIe Gen 5.0 NVMe SSD
Products & Solutions Infrastructure
Sandisk has unveiled the WD_BLACK SN8100 NVMe SSD with PCIe Gen 5.0 technology, an internal SSD delivering speeds up to 14 900 MB/s and capacities up to 4 TB, with 8 TB solutions available soon.

Read more...
SA’s strained, loadshedding-prone grid faces cyberthreats
Power Management Information Security
South Africa’s energy sector, already battered by decades of underinvestment and loadshedding, faces another escalating crisis; a wave of cyberthreats that could turn disruptions into catastrophic failures. Attacks are already happening internationally.

Read more...
Unified storage solution
Products & Solutions Infrastructure
CASA Software has announced the local availability of Nexsan’s upgraded unified storage solution, Unity NV4000, which is ideal for mixed workloads, from virtualisation and video surveillance to secure backup and recovery.

Read more...
Almost 50% of companies choose to pay the ransom
News & Events Information Security
This year’s Sophos State of Ransomware 2025 report found that nearly 50% of companies paid the ransom to get their data back, the second-highest rate of ransom payment for ransom demands in six years.

Read more...
Winners of the 2025 Southern Africa OSPAs
Editor's Choice
The winners of the 2025 Southern Africa Outstanding Security Performance Awards (OSPAs) were revealed on Wednesday, 4th June, at Securex South Africa. Winners from all categories (except the Lifetime Achievement) will be featured in the second Global OSPAs set to take place in 2026.

Read more...
Deepfakes and digital trust
Editor's Choice
By securing the video right from the specific camera that captured it, there is no need to prove the chain of custody for the video, you can verify the authenticity at every step.

Read more...
A new generational framework
Editor's Choice Training & Education
Beyond Generation X, and Millennials, Dr Chris Blair discusses the seven decades of technological evolution and the generations they defined, from the 1960’s Mainframe Cohort, to the 2020’s AI Navigators.

Read more...
Suprema unveils BioStar Air
Suprema neaMetrics News & Events Access Control & Identity Management Infrastructure
Suprema launches BioStar Air, the first cloud-based access control platform designed to natively support biometric authentication and feature true zero-on-premise architecture. BioStar Air simplifies deployment and scales effortlessly to secure SMBs, multi-branch companies, and mixed-use buildings.

Read more...
Back-up securely and restore in seconds
Betatrac Telematic Solutions Editor's Choice Information Security Infrastructure
Betatrac has a solution that enables companies to back-up up to 8 TB of data onto a device and restore it in 30 seconds in an emergency, called Rapid Access Data Recovery (RADR).

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.