| 名称 |
Evil Twin Wi-Fi Attack |
|
|
| 摘要 |
Adversaries install Wi-Fi equipment that acts as a legitimate Wi-Fi network access point. When a device connects to this access point, Wi-Fi data traffic is intercepted, captured, and analyzed. This also allows the adversary to use "adversary-in-the-middle" (CAPEC-94) for all communications. |
| 前置条件 |
None |
| 解决方案 | Commercial defensive technology that monitors for rogue Wi-Fi access points, adversary-in-the-middle attacks, and anomalous activity with the mobile device baseband radios. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-300 |
Channel Accessible by Non-Endpoint |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-616 |
An adversary provides a malicious version of a resource at a location that is similar to the expected location of a legitimate resource. After establishing the rogue location, the adversary waits for a victim to visit the location and access the malicious resource. |
|