Using public Wi-Fi has now become the norm, we can connect to the internet anywhere but be careful, public networks can provide us with internet but also the possibility for cybercriminals to get to our data.
Public Wi-Fi is everywhere, in hotels, restaurants, in the subway, in squares, most of the time you don’t even need a password to connect but it can represent a threat not only for individual users but also for companies. With the advent of smart working, people are now able to work practically anywhere: in a bar, in a hotel in another city or even while waiting for a plane at the airport.
According to Forbes Advisor, most people (56%) connect to public Wi-Fi networks that do not require passwords. This convenience comes at a price and many do not know that criminals can steal credit card details, passwords and other sensitive information as well as the fact that they themselves may have created a fake free network to steal data.
There are several ways cybercriminals can attack public Wi-Fi, and they have an easy time with it
• Man-in-the-Middle (MITM) attacks: This is one of the most common threats to public Wi-Fi. In a MITM attack, the hacker gets “in the middle” between the Wi-Fi and the user and alters the communication between the two parties. The user believes they are communicating directly with a website, an email server, or another user, but the cybercriminal transmits the information, simultaneously capturing sensitive data in the process.
• Eavesdropping: Public Wi-Fi networks, especially those without encryption, allow hackers to “listen” to data transmitted over the network. Tools such as packet analyzers can capture unencrypted traffic, allowing hackers to easily extract sensitive information.
• Rogue hotspots: A hacker can set up a fake Wi-Fi network, often with a name similar to a legitimate network (for example, “CoffeeShopFreeWiFi” instead of “CoffeeShop_WiFi”), unsuspecting users connect to this hotspot, and the hacker can monitor all traffic, capturing any sensitive data transmitted.
• Honeypot networks: Similar to scam hotspots, these are malicious networks set up to lure users. Once connected, the hacker can distribute malware or attempt to exploit vulnerabilities in the user’s device. • Spoofing: In a spoofing attack, the hacker spoofs their identity, that is, they impersonate another device on the network, redirecting traffic through their device. This allows them to capture and manipulate data.
• Session hijacking: In this case, the attacker hijacks a session between the client and the server (for example, a login session to a website). This can allow them to gain unauthorized access to accounts or services.
• Malware distribution: Public Wi-Fi can be used as a means to distribute malware. For example, malware can be included in software updates or downloads. Once a user’s device is infected, the malware can steal information, monitor user activity, or insert the device into a botnet.
• Login page phishing: Some public Wi-Fi networks redirect users to a login or terms acceptance page before granting access. Hackers can replicate these pages to capture login credentials or other personal information.
To protect yourself from these threats when using public Wi-Fi, you should take preventative measures:
Hot spot owners: First, take advantage of the web filter for Wi-Fi hotspots. Not only will you protect your customers from malware and malicious resources, but you can also increase customer loyalty by letting them know that your location offers a safe Internet area. Using a DNS filtering service will also allow you to collect valuable anonymous statistics about your users’ preferences, which can be leveraged in marketing campaigns.
Some recommendations for public Wi-Fi users • Implement DNS filtering services, such as SafeDNS.
• Avoid accessing sensitive sites or services, such as banking platforms.
• Disable sharing settings on your device.
• Always turn off the network after disconnecting to avoid automatic reconnections.
• Use HTTPS websites and ensure SSL/TLS is in use when transmitting sensitive data.
• Turn off your phone’s Wi-Fi when not in use
• Use a virtual private network or VPN if possible
• Have a reliable antivirus
In summary, while public Wi-Fi offers convenience, it is essential to be aware of its vulnerabilities.
Using public Wi-Fi has now become the norm, we can connect to the internet anywhere but be careful, public networks can provide us with internet but also the possibility for cybercriminals to get to our data.
Public Wi-Fi is everywhere, in hotels, restaurants, in the subway, in squares, most of the time you don’t even need a password to connect but it can represent a threat not only for individual users but also for companies. With the advent of smart working, people are now able to work practically anywhere: in a bar, in a hotel in another city or even while waiting for a plane at the airport.
According to Forbes Advisor, most people (56%) connect to public Wi-Fi networks that do not require passwords. This convenience comes at a price and many do not know that criminals can steal credit card details, passwords and other sensitive information as well as the fact that they themselves may have created a fake free network to steal data.
There are several ways cybercriminals can attack public Wi-Fi, and they have an easy time with it
• Man-in-the-Middle (MITM) attacks: This is one of the most common threats to public Wi-Fi. In a MITM attack, the hacker gets “in the middle” between the Wi-Fi and the user and alters the communication between the two parties. The user believes they are communicating directly with a website, an email server, or another user, but the cybercriminal transmits the information, simultaneously capturing sensitive data in the process.
• Eavesdropping: Public Wi-Fi networks, especially those without encryption, allow hackers to “listen” to data transmitted over the network. Tools such as packet analyzers can capture unencrypted traffic, allowing hackers to easily extract sensitive information.
• Rogue hotspots: A hacker can set up a fake Wi-Fi network, often with a name similar to a legitimate network (for example, “CoffeeShopFreeWiFi” instead of “CoffeeShop_WiFi”), unsuspecting users connect to this hotspot, and the hacker can monitor all traffic, capturing any sensitive data transmitted.
• Honeypot networks: Similar to scam hotspots, these are malicious networks set up to lure users. Once connected, the hacker can distribute malware or attempt to exploit vulnerabilities in the user’s device. • Spoofing: In a spoofing attack, the hacker spoofs their identity, that is, they impersonate another device on the network, redirecting traffic through their device. This allows them to capture and manipulate data.
• Session hijacking: In this case, the attacker hijacks a session between the client and the server (for example, a login session to a website). This can allow them to gain unauthorized access to accounts or services.
• Malware distribution: Public Wi-Fi can be used as a means to distribute malware. For example, malware can be included in software updates or downloads. Once a user’s device is infected, the malware can steal information, monitor user activity, or insert the device into a botnet.
• Login page phishing: Some public Wi-Fi networks redirect users to a login or terms acceptance page before granting access. Hackers can replicate these pages to capture login credentials or other personal information.
To protect yourself from these threats when using public Wi-Fi, you should take preventative measures:
Hot spot owners: First, take advantage of the web filter for Wi-Fi hotspots. Not only will you protect your customers from malware and malicious resources, but you can also increase customer loyalty by letting them know that your location offers a safe Internet area. Using a DNS filtering service will also allow you to collect valuable anonymous statistics about your users’ preferences, which can be leveraged in marketing campaigns.
Some recommendations for public Wi-Fi users • Implement DNS filtering services, such as SafeDNS.
• Avoid accessing sensitive sites or services, such as banking platforms.
• Disable sharing settings on your device.
• Always turn off the network after disconnecting to avoid automatic reconnections.
• Use HTTPS websites and ensure SSL/TLS is in use when transmitting sensitive data.
• Turn off your phone’s Wi-Fi when not in use
• Use a virtual private network or VPN if possible
• Have a reliable antivirus
In summary, while public Wi-Fi offers convenience, it is essential to be aware of its vulnerabilities.