CAPECattack pattern

CAPEC-615 Evil Twin Wi-Fi Attack

Low Official page ↗
Abstraction
Detailed
Status
Draft
Typical severity
Low
CAPEC version
3.9

Description

Adversaries install Wi-Fi equipment that acts as a legitimate Wi-Fi network access point. When a device connects to this access point, Wi-Fi data traffic is intercepted, captured, and analyzed. This also allows the adversary to use "adversary-in-the-middle" (CAPEC-94) for all communications.

Prerequisites

• None

Consequences

• Confidentiality: Read Data

Mitigations

• Commercial defensive technology that monitors for rogue Wi-Fi access points, adversary-in-the-middle attacks, and anomalous activity with the mobile device baseband radios.

Related

Child of · CAPEC (1)

  • CAPEC-616 Establish Rogue Location attack pattern

Weakness · CWE (1)

  • CWE-300 Channel Accessible by Non-Endpoint weakness

Referenced by CWE · attack pattern (1)

  • CWE-300 Channel Accessible by Non-Endpoint weakness