The probability of black WiFi in hotels is small and harmful. How to avoid being recruited?

As a WiFi star who goes everywhere, Bian Xiao said he was a little panicked. But it doesn't matter. Take the money from my card to buy a sesame seed cake, and the hacker has to make up 20 cents himself.

Full text 1673 words, reading time is about 3.5 minutes.

In five-star hotels, fake WiFi, bank cards, online account passwords and other personal information may be stolen. This is not sensational, but real. Someone made a video of the test and sent it online, which attracted more attention.

Video screenshot

The video shows that in a five-star hotel in Cancun, Mexico, there are several groups of WiFi with similar names that can be connected at any time, including "fake WiFi" set by network security experts. Once someone connects to such WiFi, hackers can monitor their online activities in real time and steal personal information such as email account password and bank card payment password.

The so-called "fake WiFi" in the video, which is what we usually call "fishing WiFi", frequently appears in hotels, airports, tourist attractions, shopping centers and buses, among which hotels rank first.

Fishing WiFi is tricky

In fact, the above situation also happens occasionally in China.

Mr. Huang from Guangdong said that when he stayed in a hotel in Quanzhou last year, he found two WiFi-like names after searching, one with a password and the other without a password. He chose the one with strong signal and no password to connect the mobile phone with the computer. I was woken up by a text message in the middle of the night. Someone logged into Alipay and has transferred hundreds of dollars from his bank card. It is understood that the WiFi it connects to is not a hotel WiFi, but a fishing WiFi.

Another netizen, Cheng, said that he bought a takeaway in a hotel with free Wifi, and later found that the money in TenPay was transferred twice.

Previously, CCTV 3 15 party also exposed a similar situation. At that time, engineers from CCTV and an Internet security company exposed some "catty" phishing WiFi on the spot. The testee's mobile device only needs to be connected to the phishing WiFi, and the photos, bank card passwords, social software passwords, email passwords and other private data in the mobile phone can be obtained by hackers.

With the popularization of network technology, people's safety awareness is also increasing. The situation that phishing WiFi is suspected of economic crimes has declined, but the risk is still there. 20 17 China public WiFi security report shows that most risky WiFi are low-risk hotspots that will not cause obvious harm to users, and the proportion of users who encounter medium-risk and high-risk hotspots when connecting public WiFi is only 0.00 19% and 0.009 1%.

However, this small probability event is not small. According to a network security expert who did not want to be named, high-risk hotspots often lead users to phishing websites, or tamper with SSL to spy on users' account passwords and other data. At present, the economic losses caused by phishing WiFi are difficult to quantify. According to statistics, the loss in 20 15 years is about 5 billion yuan.

It is not easy to detect after being "fished" and it is hard to blame.

The reporter checked the relevant information and found that many economic losses caused by fishing WiFi have a common feature, that is, self-knowledge. Most netizens only found out when they received SMS reminders or saw Alipay, WeChat, Tenpay and other accounts logging in from different places or other devices.

In this regard, Cui, an expert in network security law, explained that this reflects the concealment of phishing WiFi, and the analysis of user data is completed through remote control. Once recruited, the probability of economic loss is very high, and there is a certain technical threshold for obtaining evidence. It is also difficult to pursue legal responsibility, and it is necessary to call the police for help from public security network police and other relevant departments. In addition, in the definition of liability, if it is in the public ***WiFi environment such as hotels, airports, scenic spots, etc., there are also blind spots in the relevant regulations when determining the responsibility of place providers for causing economic losses.

A wave of "black" raiders

In fact, although phishing WiFi is harmful to personal interests, it can still be prevented and controlled before connection:

1, be wary of multiple identical and similar WiFi in the same area.

In this case, it is very likely that the hacker set up a phishing WiFi, named after the official WiFi, to trick the user into clicking, and finally intercepted highly sensitive information such as passwords in the mobile phone.

2. Try to use the 4G network for mobile client shopping payment.

In public ***WiFi such as airports, hotels and shopping centers, it is best not to use passwords related to payment and property. It is recommended to switch to a 4G traffic network. Mobile phone online shopping, bank client, etc. Most of them use multiple encryption methods such as client binding, SSL encryption technology and timeout exit. Prevent being intercepted by others and ensure the security of the transaction. Compared with logging in to a web page, the operation is safer.

3. Use hotspots with caution in public places and turn off the WiFi switch.

WiFi provided by an official institution with a verification mechanism needs to be confirmed by hotel staff before it can be connected.

4. The password should be changed regularly.

The account password and online banking password should be revised regularly to prevent the loss of payment account funds caused by the disclosure of information from other websites, and to make the passwords as complicated as possible.

5. Turn off the WiFi switch.

The mobile phone will record all used WiFi hotspots, and once it encounters a hotspot with the same name, it will automatically link. Try not to turn on the WiFi function when public areas are not using WiFi, so as not to link malicious WiFi without your knowledge.

Finally, and most importantly, once personal information is found stolen, contact banks and other institutions to freeze accounts as soon as possible to minimize losses.

Text/Wang Qingbin

Editor on duty: A pair of songs.

Recommended reading: