In airports, malls, cafés, hotels, etc., a large number of WiFi hot spots with similar names are often seen, probably mixed with fishing hot spots set up by the attackers. Fishing WiFi is used as a regular hotspot to induce user connections and once users have been connected and registered for certification, the account code is stolen and subsequent communications can be hijacked. WiFi access security certification works, and fishing WiFi and simulators must cross the border.
Fishing WiFi and imitation hot spots.
The attackers set up a hot spot with the same name as the regular WiFi, which they thought was connected to a formal network and actually had data through their equipment. The attackers could steal the account code that users entered on the authentication page, intercept content online, induce users to access fishing sites, or even launch an intermediary attack."Figure convenient"The heart of the fish is to enable users to identify their own regular hot spots and to keep identity information from being intercepted by counterfeiters during authentication.
How to identify the fake hotspots
There are several ways to identify the imitation hotspots. Carefully viewing the name of the hotspots, imitating them often involves a name like an additional character, replacing it with similar characters, which is not visible at first glance; looking at signal strength and location, formal heat points are usually indoor, stable, simulated hot spots may signal abnormal or sporadically; more reliable methods are looking at the authentication process, where the formal WiFi access security certification should be done through secure passage (HTTPS) and pages can be trusted and do not require users to enter passwords on unsafe pages. Businesses and public places should disclose names of regular hot spots in visible locations to help users distinguish between them.
Let the certification process itself be fishing-proof.
WiFi has access to the ability of secure identifications to fish against fishing. First, authentication pages must be encrypted by HTTPS to ensure that account codes entered by users are not transmitted explicitly in the network; second, certification pages should have authenticated identities such as formal authentication domain names, which users can confirm as official; third, certification processes need to be simple and not require users to repeat passwords on unrelated pages; fourth, robust authentication methods such as certification of certificates can be used, and even if connections are hijacked, perpetrators cannot falsify their identity."Simulation"But it's not like it's a secure authentication link.
Protection on the side of deployment: detection and warning of hot spots
In addition to enabling users to identify, operators are required to protect themselves from deployment. The wireless network management system allows monitoring of the surrounding hotspots and detecting suspicious hot spots with SSID names for their own units, prompt warning and disposal; in critical locations, it is possible to match the WIPS capabilities to identify and block signal from counterfeiting hot spots; open networks such as visitors WiFi are strengthened to verify and audit and respond to unusual access behaviour when detected."Watch out for the user."Changed"The system discovered it."。
User education and daily habits
Good technical protection is also necessary to ensure user safety. To guide users into a few habits: identify hotspot names and sources before connecting WiFi, without linking undefined hot spots; confirm that the page is HTTPS and the domain name is credible before entering an account password on certified pages; do not handle sensitive account numbers and payment operations under public WiFi; open terminal automatic connection management to avoid automatically connecting equipment to counterfeit hot spots. Enterprises can regularly conduct security awareness campaigns by clarifying their knowledge of fish-free WiFi and allowing users to reduce the risk of fraud from the source point of origin.
WiFi access ID security certification for fishing anti-fish WiFi and counterfeit hotspots, the core of which is"Authentication links are secure themselves, deployment side proactive discovery and user habits developed"Three-pronged. No fishing hotspots imitate names, no safe authentication process. Make the authentication access secure, monitor the counterfeit hot spots, develop user awareness, and WiFi access easy and safe for users to connect and use.