An old tech scam has recently resurfaced in an unexpected place: passenger airplanes. This scam, known as the “Evil Twin” Wi-Fi scam, poses a significant threat to travelers’ personal information and online security. Let’s break down what this scam is, how it works, and what you can do to protect yourself.

The “Evil Twin” Wi-Fi Scam

The “Evil Twin” Wi-Fi scam involves creating a fake Wi-Fi network that mimics a legitimate one. This fake network is designed to trick users into connecting and potentially revealing sensitive information. While this type of scam isn’t new, its appearance on airplanes is recent and concerning.

The Australian Incident

The story broke in Australia when law enforcement arrested a man accused of stealing airline passengers’ personal information during flights. The method he allegedly used was the “Evil Twin” Wi-Fi scam. Here’s how it worked:

1. The suspect brought a portable Wi-Fi hotspot onto flights.
2. He named this hotspot to match the airport’s Wi-Fi network name exactly.
3. Once the plane was in the air and passengers switched to airplane mode, their devices would later attempt to reconnect to Wi-Fi.
4. Some passengers’ devices automatically connected to the fake network, thinking it was the airport Wi-Fi they had previously used.
5. The fake network then promusers to log in using their social media or email credentials.
6. Unsuspecting passengers who complied essentially handed over their login information to the scammer.

Why This Scam is Dangerous

Adrianus Warmenhoven, a security adviser at Nord VPN, explains the severity of this threat: “A lot of companies will never, ever meet you physically. They will only meet you digitally. And if I can get your digital identity, I am you.”

This means that once a scammer has your login credentials, they can:

• Access your email accounts
• Take control of your social media profiles
• Potentially gain access to financial accounts
• Steal your identity for various fraudulent activities

The scam’s simplicity makes it particularly dangerous. As Warmenhoven notes, “It’s extremely easy” and “not hard to do,” highlighting the accessibility of this technique to potential scammers.

Global Implications

While the arrest in Australia is considered a first for this specific scenario, the threat is not limited to any country or airline. Airports in the United States, including San José and Oakland, have acknowledged awareness of the situation and are monitoring it closely.

Protecting Yourself from “Evil Twin” Wi-Fi

Here are practical steps you can take to safeguard your information:

1. Forget public Wi-Fi networks: Regularly clear your device’s list of saved public Wi-Fi networks.
2. Be selective about connections: Don’t allow your device to automatically connect to available networks. Only connect to networks you know and trust.
3. Manage your Wi-Fi settings: Consider turning your Wi-Fi off by default and only activating it when necessary.
4. Use a VPN: A Virtual Private Network encrypts your internet connection, adding a layer of security when using public Wi-Fi.
5. Be cautious about login requests: Think twice before entering a public Wi-Fi network login credentials.
6. Prefer cellular data: When in doubt, use your cellular data connection instead of public Wi-Fi.
7. Keep devices updated: Regularly update your devices to ensure you have the latest security patches.
8. Use strong, unique passwords: Avoid using the same password across multiple accounts.

Expert Advice

Australian Federal Police Detective Andrea Coleman advises, “Once you’re done using a public Wi-Fi, change your device settings to ‘forget network’.” She also recommends using a VPN for additional security.

The Bigger Picture

This scam is part of a broader landscape of digital security threats. As our lives become increasingly digital, protecting our online identities is more crucial than ever. The “Evil Twin” Wi-Fi scam serves as a reminder that cybersecurity isn’t just about complex hacking techniques – sometimes, the simplest methods can be the most effective.

Staying Vigilant

Remember, this scam can occur anywhere with public Wi-Fi, not just on airplanes. Always be cautious when connecting to public networks, whether at an airport, hotel, coffee shop, or any other public space.

Pavel Odnoletkov

Head of Marketing at MBC Managed IT Services

With more than 20 years of experience, Pavel leads MBC’s marketing efforts.