June 28th, 2024

WA man set up fake free WiFi at Australian airports and on flights,police allege

A man in Western Australia was arrested for creating fake wifi networks at airports and flights to steal personal data. He faces cybercrime charges for setting up deceptive networks to collect users' information. Police advise caution and cybersecurity measures.

Read original articleLink Icon
WA man set up fake free WiFi at Australian airports and on flights,police allege

A 42-year-old man from Western Australia has been arrested for allegedly setting up fake free wifi networks at Perth, Melbourne, and Adelaide airports, as well as on domestic flights, to steal personal data. The man is facing nine cybercrime charges and was due to appear in court. Australian federal police claim he created "evil twin" wifi networks that mimicked legitimate ones to deceive users into entering their personal information. The fake networks were reportedly set up at various locations linked to the man's previous employment. Police launched an investigation after an airline reported a suspicious wifi network during a domestic flight in April. Authorities found a portable wireless device, laptop, and mobile phone in the man's possession. Users were directed to a dummy page to input their email or social media login details, which were then saved for potential misuse. The public is advised to be cautious when using public wifi networks, avoid entering personal information, change passwords if connected to suspicious networks, and take cybersecurity precautions.

Related

Snowflake breach snowballs as more victims, perps, come forward

Snowflake breach snowballs as more victims, perps, come forward

The Snowflake data breach expands to include Ticketek, Ticketmaster, and Advance Auto Parts. ShinyHunters claim involvement, Snowflake enforces security measures. CDK faces ransomware attack, Juniper and Apple vulnerabilities identified. Jetflicks operators convicted.

South Korean ISP Infected 600,000 Torrenting Subscribers with Malware

South Korean ISP Infected 600,000 Torrenting Subscribers with Malware

South Korea's KT accused of distributing malware to 600,000 subscribers to block torrent traffic, sparking privacy concerns and legal scrutiny. Police investigate organized hacking attempt by KT. Concerns raised over network interference.

South Korean ISP 'Infected' Torrenting Subscribers with Malware

South Korean ISP 'Infected' Torrenting Subscribers with Malware

South Korea's KT accused of distributing malware to block torrent traffic, affecting Webhard services. Allegations suggest organized hacking for eavesdropping and cost management. Legal scrutiny ensues, revealing network management challenges.

ID verification service for TikTok, Uber, X exposed driver licenses

ID verification service for TikTok, Uber, X exposed driver licenses

A cybersecurity researcher found AU10TIX's admin credentials exposed online, risking data breach for TikTok, Uber users. Concerns rise over ID verification services' vulnerability to cyberattacks, emphasizing the need for enhanced security measures.

Identity Verification Used by X, TikTok, and Uber Exposed Driver's Licenses

Identity Verification Used by X, TikTok, and Uber Exposed Driver's Licenses

An identity verification firm, AU10TIX, exposed login credentials, risking access to sensitive data like driver's licenses. Despite claims of prompt revocation, functional credentials were found. AU10TIX partners with major platforms.

Link Icon 9 comments
By @padre24 - 5 months
Optus should employ this guy.. or Medibank, or Latitude Finance. Lots of opportunities for him.
By @gruez - 5 months
How did they find the guy? After all it could be anyone on the flight.
By @Havoc - 5 months
Surprised that the airline picked up the rogue network
By @jjbinx007 - 5 months
Were people entering login details on non-encrypted dummy sites?
By @nyjah - 5 months
Maybe someone here can enlighten me. I usually don't bring my phone into stores. But the other day I went to Home Depot and I had my phone on me. Despite my settings of "Do not connect to any wifi network", I look and I am shocked to find that my phone is connected to some random wifi network. Odd.

I get home and all the sudden my phone won't connect to my wifi and when I try to connect it to my home wifi, it says, "incorrect password" and its connection was intermittent. It would come back for a second if I turned the wifi on and off again.

Eventually I deleted every known wifi network from my phone and its been solid since. But what the heck happened at home depot?

By @starttoaster - 5 months
WA is the state code for Washington in the US, by the way. Is WA commonly thought of as "Western Australia" worldwide outside of the US? If not, maybe consider using less overloaded abbreviations in your titles.
By @Molitor5901 - 5 months
Interesting, but does this rise to the level of a crime? Only in Australia? What if I put a box that says fill out this card and be entered into a drawing to win a free car. Instead I steal the data. It sounds like fraud, but there's no exchange of money and the data itself would have diminutive value. Only when I use the data might it rise to the level of a crime.

Anyone with knowledge of Australia's legal system that could please explain how this is a crime?

By @appstorelottery - 5 months
This is called an evil portal, it's super simple to do - Flipper has inbuilt functionality for this. It's super simple, broadcast an SSID with "Amazon Free Wifi" - when the user connects serve up a simple login page with Amazon logo, prompt for username and password - save the username and password, and just do nothing... end user doesn't understand why it didn't work, but it's too late at this point. Remarkably simple.