Experts warn of Wi-Fi 'evil twin' scam

Wireless phishing attacks threaten corporate data

Robert Jaques, vnunet.com 21 Jan 2005

Security experts have reignited fears over the potential danger of so-called 'evil twin' Wi-Fi phishing scams.

The well-documented attack methodology centres on hackers fooling wireless network users into logging onto rogue access points set up to emulate legitimate wireless Lan equipment, warned Professor Brian Collins, head of information systems at Cranfield University.

Once hackers have set up these wireless networks next to commercial hotspots, and conned users into logging on, they begin harvesting data from laptops connected to the compromised Wi-Fi network.

"This has been going on for some time," Professor Neil Barrett of Cranfield's computer science department told vnunet.com.

"It's like the Wi-Fi version of rogue diallers but with the added bonus of financial information. It's also akin to phishing in the way that the user is tricked."

But Barrett added that the problem will not affect websites running fully certified systems where both the website host and the user have a software certificate which identifies them to each other. However, he warned that there are relatively few websites that offer this level of service.

David Callisch, director of communications at Wi-Fi firm Aruba, said: "Many hotspots still offer a simple access service that does not currently provide protection against hacking, and this new threat will only add to the woes of mobile computer users.

"The 'evil twin' menace means that users can no longer assume that if they enter a wireless hotspot they are connecting to a bona fide wireless internet connection.

"Enterprises that enable mobile working need to enforce a corporate security policy to ensure that a wireless hotspot does not become an open access point into their corporate network."

See also: