An evil twin attack is typically a spoofing attack that tricks users into connecting to a fake Wi-Fi point that poses itself as a legal network. Once the user is connected to an “evil twin” network, cybercriminals/hackers can access everything from their network traffic to private login credentials.
The name Evil Twin attack is given to their ability to mimic real Wi-Fi networks to the point that they look realistic. We cannot recognise the difference between real and fake networks, so this type of attack is quite dangerous as it is nearly impossible to identify.
An example to be considered :
Let’s consider that a user decides to connect to a public Wi-Fi network at a local shop—it can be a café or railway station. The user has used this network previously as well, so the user assumes it is safe and reliable. This time, a hacker or cybercriminal sets up an evil twin network with an identical real-like name and a stronger signal than the real access point. The user connects to it despite it being listed as unsecured.
The user uses this network as it has a stronger signal, ignoring all other factors. The user logs into their bank account to check their balance and later accesses their company’s portal to catch up on work. Because the user has not set up a virtual private network (VPN) to encrypt their data, the evil twin network allows the hacker to access their banking information and company website. This way, the user is at a big risk!
Protect yourself from an Evil Twin Attack! The following are the common ways :
- Use your hotspot network (Safest Option): A personal hotspot is the safest and most reliable way to use it whenever you are travelling. This prevents you from dangerous hackers trying to steal your confidential data.
- Never use Unsecured Wifi Hotspots: Even if you use public networks, Avoid using unsecured label wifi networks. This reduces the risk of getting hacked
to a significant level.
- Always disable Auto Connect: If the user has Auto Connect enabled by chance, it directly connects to these unsecured networks, which in turn might invite a serious evil twin attack.
- Use HTTPS websites only: Never opt for something that is just HTTP. HTTPS is end-to-end encrypted and safe to use, which prevents hackers and cybercriminals from accessing your data.
- Two-factor Authentication: The best way to prevent these types of deadly attacks is to add two-factor authentication to your account. Even if a hacker tries to get access to a user’s account, Two-factor authentication acts as a wall, preventing the hacker from accessing the system.
Despite all of this, if you still fall into such a case, the user should immediately report your police department and, in the meantime, immediately close the bank accounts to avoid any kind of financial loss.
