3 ms·
Isn’t spoofed SSID an old attack? I couldn’t figure what’s new here.
by nolongerthere 2y ago
Isn’t spoofed SSID an old attack? I couldn’t figure what’s new here.
- friend_and_foe 2y agoIts a site called top10vpn. This is spam.
- lis 2y agoAt least not intentionally, though I agree that the domain sounds spammy. I’ve found this on mastodon by Mathy Vanhoef: https://infosec.exchange/@vanhoefm/112440635423432857 https://infosec.exchange/@vanhoefm/112440635423432857
- hgyjnbdet 2y agoThat's what I thought when I read it too, not entirely clear what's new here.
- MattPalmer1086 2y agoAs far as I can tell this attack only makes a client connect to the wrong network, by dynamically rewriting the SSIDs using a man in the middle. So the attacker doesn't control the wrong network access point, they just make the client connect to it when it thinks it's connecting to something else. It relies on both networks sharing the same credentials, and at the end, the attacker cannot man in the middle the connection itself. They have just forced the user to connect to a different network than intended.