Understanding Evil Twin AP Attacks and How to Prevent Them

guest · Nov 15, 2018

Understanding Evil Twin AP Attacks and How to Prevent Them
November 14, 2018
https://www.darkreading.com/attacks...tacks-and-how-to-prevent-them-/a/d-id/1333240

One of the most dangerous Wi-Fi threat categories is undoubtedly "evil twin" APs, an attack technique nearly two decades old. In fact, the US Department of Justice recently charged hackers within the Russian military agency GRU with implementing evil twin AP attacks to steal credentials [...]

If the attacker can't successfully trick the victim into connecting to the evil twin, he can simply break the connection between the victim and any legitimate AP [...] de-authentication attack.
Once a client is connected to the evil twin AP, the attack is over.
Preventing Evil Twin AP Attacks
For Wi-Fi users, an evil twin AP is nearly impossible to detect because the SSID appears legitimate and the attackers typically provide Internet service. In most cases, the best way to stay safe on unfamiliar Wi-Fi networks is to always use a VPN to encapsulate the Wi-Fi session in another layer of security.
Click to expand...

Rasheed187 · Nov 17, 2018

I believe GlassWire offers a feature that monitors for Evil Twin attacks, but I'm not sure how it works.

guest · Nov 17, 2018

Rasheed187 said: ↑

I believe GlassWire offers a feature that monitors for Evil Twin attacks, but I'm not sure how it works.
Click to expand...

It was introduced in Glasswire v2.0: #232 and this feature checks if the MAC address of the access point changes:

Another new feature of GlassWire 2.0 is Evil Twin Alerts. GlassWire monitors WiFi networks, and it warns users now if the Mac address of WiFi access points change.

"A new type of network attack is known as an “Evil Twin” attack. This type of attack occurs when someone sets up a new WiFi access point with a name similar to your current WiFi access point. GlassWire watches out for these types of attacks by warning you if the Mac address of the WiFi access point you’re on changes. [...]"
Click to expand...

Rasheed187 · Nov 24, 2018

Thanks, looks like a useful feature.

Log in or Sign up

Understanding Evil Twin AP Attacks and How to Prevent Them

guest Guest

Rasheed187 Registered Member

guest Guest

Rasheed187 Registered Member

Log in or Sign up

Understanding Evil Twin AP Attacks and How to Prevent Them

guest Guest

Rasheed187 Registered Member

guest Guest

Rasheed187 Registered Member

Useful Searches