CAPECattack pattern
CAPEC-615 Evil Twin Wi-Fi Attack
Low
Official page ↗
- Abstraction
- Detailed
- Status
- Draft
- Typical severity
- Low
- CAPEC version
- 3.9
Description
Adversaries install Wi-Fi equipment that acts as a legitimate Wi-Fi network access point. When a device connects to this access point, Wi-Fi data traffic is intercepted, captured, and analyzed. This also allows the adversary to use "adversary-in-the-middle" (CAPEC-94) for all communications.
Prerequisites
• None
Consequences
• Confidentiality: Read Data
Mitigations
• Commercial defensive technology that monitors for rogue Wi-Fi access points, adversary-in-the-middle attacks, and anomalous activity with the mobile device baseband radios.
Related
Child of · CAPEC (1)
- CAPEC-616 Establish Rogue Location attack pattern
Weakness · CWE (1)
- CWE-300 Channel Accessible by Non-Endpoint weakness
Referenced by CWE · attack pattern (1)
- CWE-300 Channel Accessible by Non-Endpoint weakness