Mobile Device Security

Many businesses offer free Wi-Fi access to get more customers in the door, allowing mobile users to gain access to the internet quickly and easily. Unfortunately, cybercriminals can harvest an individual’s information in several ways, including with a Man-in-the-Middle attack. In that attack, the hacker exploits a flaw in the business’s Wi-Fi network to get access to all the information sent by users, such as passwords or browsing history.

Another danger to mobile users is that of rogue hotspots, set up by hackers to look legitimate because of their name and availability. Once users connect, though, data from the device can be stolen and the device itself can be infected with malware.

While there’s certainly a risk of an individual’s identity theft, businesses can incur significant losses from the cyberattacks that occur in public areas. Employees frequently use public Wi-Fi networks to check emails or communicate with colleagues outside of normal business hours. Infected devices can provide the springboard for ongoing attacks against a business’s digital assets.

In addition, cybercriminals can target specific businesses or high-level managers using Wi-Fi. For example, in 2014, safety experts uncovered a scam known as “Dark Hotel.” Hackers waited for people to log onto the Wi-Fi offered at certain luxury hotels. When high-level targets, such as government officials or CEOs, used the hotel’s free Wi-Fi, they were tricked into downloading “necessary” updates for their software. 

The updates were disguised malware, and the victims later found that their mobile devices had been infected. The malware was stealing critical organization information in what experts judged to be a very sophisticated attack. The hacker still has not been identified.