“Good hacker” explains the risks of using open WiFi networks

We live in an increasingly connected world, but it's important to remember that there are risks involved. For most cybersecurity experts, the weakest link in any system is the user themselves – whether at home or at work.

The main forms of cyber attack do not focus on breaking into complex systems, but rather on exploiting human flaws. It is estimated that 94% of malware arrive by email and that the phishing is responsible for 41% of violations. In 2023, 75% of experts reported an increase in the number of cyberattacks compared to the previous year.

Companies have invested in training to make their employees aware of the threats. But the focus tends to be the corporate environment, leaving aside the risks in public places, where people tend to let their guard down.

I myself have witnessed situations that illustrate this vulnerability. With years of experience as certified ethical hacker and working in cybercrime investigations, I know how easy it is for cybercriminals to exploit these loopholes.

On one occasion, while shopping in a store, I noticed that the attendants asked for the customers' email address to send the electronic invoice.

While this may seem harmless – and more sustainable than paper receipts – an observant hacker could easily use this information, combining the email address with data such as location, items purchased and values, to create email messages. phishing highly convincing.

In another situation, during a show, I observed someone using their cell phone in front of me. Within minutes, I was able to identify his name, profession, address, telephone number, car model and even his bank balance. This information could be used by a hacker for identity theft or even blackmail.

These examples show how much we need to be attentive to the information we expose in public and that we must carefully evaluate the networks we connect to.

THE DANGER OF OPEN WIFI NETWORKS

At the same show, I saw many people connected to the stadium's WiFi, which didn't require a password and was completely unprotected. Networks like this are ripe for cyber attacks, such as the so-called “evil twins”.

In this type of attack, the hacker creates a fake wireless access point with a catchy name, such as “Stadium 2 Wi-Fi.” Once a device connects, the attacker can intercept the transmitted data.

These fake networks can also be used for espionage, to inject malware in downloads or carry out attacks in which the hacker impersonates the other person in a communication to steal information.

The main forms of cyber attack focus on exploiting human flaws.

Another common threat in insecure networks is “packet capture”, in which cybercriminals monitor data traveling on the network and steal valuable information.

To protect yourself, one solution is to use a virtual private network (VPN), although I didn't see anyone doing this during the show. In general, antiphishing systems in emails also help protect against attacks.

The simplest measure, however, is to be alert to dangers and take basic precautions in public places. When you protect your devices and data, no matter where you are, the chances of becoming a victim decrease considerably.

This article was republished from “The Conversation” under Creative Commons license. Read the original article.

---

ABOUT THE AUTHOR

Christopher Patrick Hawkins is professor of cybersecurity and computer science at Staffordshire University. find out more

---