Once hackers have access to your WiFi network, they can readily capture personal and business information. There are two types of WiFi attacks. Passive attacks, where the hacker captures your network traffic, are almost impossible to detect because the hacker never joins your network. They can sit silently with their antenna tuned into your network and capture gigabytes of network traffic for off-line analysis at a later time. Active attacks, where the hacker joins the network, can be the most devastating because they can launch active attacks into the network and onto your devices on the network.
There are 5 attacks that WiFi hackers can very easily & readily perform on your wireless network with very little effort or expense. The first two are passive attacks, and the last 3 are active attacks. But make no mistake - all of these attacks can be deadly.
Deadly Attack #1: Account and Password Capture. There are several applications that send your account and passwords in clear text over the network. For example, every time a POP3 mail account checks for new e-mail, the account name & password are in the clear as part of the data transfer. Anyone sniffing the network traffic can easily get your e-mail account information. Once they have that information, they can access your e-mail account at their leisure, monitoring for personal information without leaving a trace. From there, any confidential information they can get from your account just escalates their attack.
Deadly Attack #2: E-mail, IM and Web Site Traffic Capture - It is very easy to monitor and capture all of the e-mail traffic sent over an unsecured wireless network. Since most e-mail is sent in clear-text, and instant messaging is sent in HTML, it's very simple to capture the traffic and mine the traffic off line for any “interesting” information at a later time. By monitoring your wireless traffic, all of the HTML data can be captured & reconstituted as web pages on the hackers PC to see exactly what web sites & content you are surfing over the wireless network.
Deadly Attack #3: Accessing Data on Your PC. Let's face it, it's pretty easy to turn file sharing on, and then forget to turn it off when you attach to an open WiFi network. Once file sharing has been left on or the personal firewall is mis-configured, a hacker can readily access you PC and hard drive across the wireless network. Firewalls are also easy to mis-configure or turn off, and forget to turn back on. With older versions of Windows (NT, W2K), if improperly configured, it's easy prey for a hacker to get in over the network, log-in as a null session and take over your platform.
Deadly Attack #4: Access to the Corporate Network. If you’re wireless network is connected to a corporate network through a site-to-site VPN, an open wireless network punches a hole through the network, and opens up both sides of the VPN to anyone attaching to the network. Another threat is with improperly configured client VPNs which can be more easily compromised to provide the hacker access through the VPN.
Deadly Attack #5: SPAM and Virus Launching over the Wireless Network. Unsecured Networks provide are an ideal launch point from which hackers can launch SPAM & Virus attacks because it is very difficult to track the source back to them. From a distance, the SPAMmer can launch the SPAM (from your e-mail account if he or she sniffed your e-mail account info) without repudiation. When the ISP or FBI tracks down the violator, the trail points to your network, and possibly your e-mail account. The liabilities to the owner of the unsecured network are still newly contended battlegrounds for the lawyers.
Labels: SMB_WiFi, Wi-Fi_Networks, Wi-Fi_Security, WiFi_Networks, WiFi_Security
