Krympress reports:
Attackers can establish malicious programs and steal logins and passwords through connecting to Wi-Fi via a QR code, TASS was told in the Russian Ministry of Internal Affairs. According to the ministry, visitors to public places, including a cafe, can become victims of the new scheme of scams.
In a cafe or in another public place, it is proposed to connect to Wi-Fi via a QR code. This connection method can create the risks of unauthorized collection of logins and passwords— said in the Ministry of Internal Affairs.
As noted in the ministry, the goal of attackers is to intercept the accounting data or establish malicious software on the gadget of an unsuspecting person.
The use of QR codes for connecting to Wi-Fi in public places has become the usual practice, especially in cafes, restaurants and hotels, said the State Duma deputy, a member of the Information Political Committee, the Federal Digital Russia party project Anton Nemkin.
Attackers are actively using new functionality. The substitution of the QR code is a technically simple, but extremely effective scheme: just place a sticker with a fake link over the present. The user scans it without hesitation, and automatically connects to a fake network, which visually is no different from legal. As a result, the attacker gets the opportunity to intercept the data, including logins and passwords— explained Nemkin.
He emphasized that such attacks are especially dangerous in that they are passing unnoticed by most users.
If a person enters his data on the usual sites, he does not expect a catch. And the background connection to the Fake Wi-Fi network is already opening the way for a MITM attacks, the installation of malicious things and the theft of confidential information. Such a scheme is especially dangerous if the user enters the bank’s personal account or to his messenger— the deputy points out.
At the same time, the Nemkin continues, the connection to the public Wi-Fi as a whole is far from the safest thing.
Even if the network seems official, this does not mean that it is not controlled by attackers. Such access points can be specially deployed for collecting traffic, installing malicious for or theft of session data. Users should remember: convenience should not replace safety, so it is important to always show vigilance— the deputy emphasized.
To minimize the risks when connecting to public Wi-Fi networks, it is important to comply with the basic rules of digital hygiene, Nemkin noted.
When connecting, it is not recommended to go into online banking, enter logins and passwords from mail or social networks, as well as make purchases with the introduction of payment data. You also need to turn off the automatic connection to Wi-Fi in the device settings and carefully check the name of the network: attackers often create fake access points with similar names— the deputy gave recommendations.
Source: press service of the State Duma deputy Anton Nemkina
Crimea news | Krympress: Latest news and main events
Comments are closed.