'Evil twin' phishing scam targets Wi-Fi users

FRAMINGHAM, Mass. (6/2/05)--Frequent Wi-Fi users beware: An evil twin may be lurking near your wireless hot spot. Traveling business executives who frequently access airport and other wireless hot spots are being warned of a new, malicious, variant of the "Evil Twin" phishing scam that appeared in January (Computerworld.com May 10).

The latest attack works when a hacker creates a fraudulent Web site that appears to be a log-in page to a Wi-Fi network. When users log in to the false network, not only can they be coerced into revealing personal and confidential information, but as many as 45 viruses can be sent to the computers that accessed it.

Why only traveling business executives? The main reason is that traveling executives rely heavily on wireless communications for transactions and connecting to their company's network. Although everyday users of public hot spots are believed not to be at risk, companies employing hundreds of people with wireless laptops are especially vulnerable.

Here are tips to avoid becoming a victim of the "evil twin":

  • Install and frequently update all patches for personal firewall and security software.

  • Use hot spots for Web surfing only. Making online purchases or any other transactions that require account numbers and passwords is risky and best done on a secure network.

  • Only enter passwords into Web sites that have a Secure Sockets Layer (SSL) key at the bottom right of the Web browser.

  • Turn off or remove the wireless card when you are not accessing a hot spot.

  • Avoid hot spots--such as hotels, airport lounges, and conferences--where it's difficult to tell who's connected.

  • Do not use unsecured applications such as e-mail or instant messaging while at hot spots.

For more information, read "Shield Yourself From Swindles--Scams Involving Checks, ATMs, and the 'Net" in the Home & Family Finance Resource Center money savvy section.

print this story email this story
Resource Links
Home & Family Finance Resource Center
Resources to fight phishing fraud


More Consumer

Copyright © 2012 Credit Union National Association