Public Wi-Fi attacks
Rogue hotspots and fake login pages that snoop on you over open networks.
What it is
On open Wi-Fi in cafés, hotels, and airports, an attacker nearby can set up a fake hotspot with a familiar-looking name, or push a fake “sign-in” page, to intercept what you do or trick you into revealing passwords. Modern encryption has reduced the risk, but it has not removed it.
How it happens
The attacker creates an “evil twin” network named like the real one — “Airport_Free_WiFi” — hoping you connect. Once you do, they can show a fake captive-portal login that harvests your details, or watch any traffic that isn't properly encrypted. Some also use the moment to push fake software updates.
Warning signs
- Two networks with almost identical names, or one that doesn't need the expected password.
- A login or “update” page that looks slightly off or asks for too much information.
- Your browser warning that a site's security certificate is invalid.
- Being unexpectedly logged out or asked to re-enter passwords.
Who it targets
Travellers, commuters, and anyone who works from cafés are the usual targets, simply because they connect to unfamiliar networks often. Business travellers and journalists carrying sensitive information face a higher-value version of the same risk.
How to protect yourself
- Confirm the exact network name with staff before connecting.
- Avoid logging in to banking or entering passwords on public Wi-Fi when you can.
- Use your phone's personal hotspot for anything sensitive — its traffic is encrypted.
- Look for the padlock and HTTPS, and never dismiss a certificate warning.
- Consider a reputable VPN if you regularly work on public networks.
If it happens to you
- Disconnect from the network immediately and switch to mobile data.
- Change any password you entered while connected, starting with email and banking.
- Watch your accounts for unfamiliar logins and turn on two-factor authentication.
- Report a suspicious hotspot to the venue so they can warn others.