Ba hacks ya Wi-Fi public, ba hotspots ya mapasa ya mabe, na ba jacking ya jus¶

Ba aéroports, ba hôtels, ba cafés, ba centres ya conférences, ba bibliothèques, mpe ba centres ya transit ezali bisika ya liboso ya chasse mpo na ba cyberattaques mibale ya proximité physique oyo ezali na boyokani makasi: Evil Twin rogue Wi-Fi hotspots mpe Juice Jacking (ba ports publics ya chargement USB oyo ezali na likama). Ntango ozali kokangisa smartphone to ordinateur portable na yo na point d’accès sans fil oyo ekambami na mobundi to kokɔtisa nsinga na yo na port USB ya bato nyonso oyo ebongisami, opesi monguna réseau direct to pont physique mpo na kokanga mobembo na yo, kozwa mikanda na yo ya bokɔti, to kokanga ba cookies ya session ya bondimi oyo ezali kosala.

Soki owuti kososola ete okomamaki na masini email na yo, bokɔti ya kompanyi, to makambo ya karte ya kofuta na écran ya Wi-Fi ya hôtel to ya libándá ya mpɛpɔ oyo ezali kokamwisa, to soki telefone na yo ebimaki na kosɛnga ete “Tyá motema na ordinatɛrɛ oyo” ntango okɔtisaki yango na kiosque ya kofuta mbongo ya bato nyonso, kokanga mbala moko ekoki kopekisa mobundisi akanga yo libanda ya ba comptes na yo. Buku oyo epesi ba étapes ya récupération ya mbala moko ya incident, ba explications techniques ya ba attaques ya matériel sans fil na USB, ba audits ya certificat ya système d’exploitation, mpe ba protocoles ya durcissement ya voyage oyo esalemi na ba guidance ya Agence ya sécurité cybersécurité et de sécurité infrastructure (CISA) na Etats-Unis, Centre national de sécurité cybernétique (NCSC) na Royaume-Uni, Commission fédérale ya communication (FCC), mpe Agence ya Union européenne mpo na sécurité cybernétique (ENISA).

Sala boye sikoyo¶

1. Kokata mbala moko na réseau Wi-Fi to longola câble USB. Boma Wi-Fi mobimba na ordinateur portable, tablette, to smartphone na yo, to benda na nzoto nsinga na yo ya chargement libanda ya port USB public mbala moko.
2. Bobosana réseau Wi-Fi ya lokuta mpo ete aparɛyi na yo ekoki kozongisa boyokani na yango moko te. Fungola ba paramètres ya Wi-Fi ya aparɛyi na yo, pona kombo ya réseau oyo ezali na ntembe (SSID), mpe finá Bosana Réseau oyo (to longola elembo na Connectez automatiquement) mpo radio na yo etika ko diffuser ba sondes ya connexion na matériel ya attaqueur.
3. Kobongola kaka na ba données cellulaires (4G/5G) mpo na kobatela ba comptes oyo ezali na likama. Kosalela ata moke te réseau Wi-Fi ya bato nyonso ya mboka ntango ozali kozongisa ba credentiels na yo. Salelá connexion cellulaire native ya smartphone na yo to ordinateur ekeseni, oyo ezali na compromis te na réseau oyo otyelaka motema.
4. Kolongola ba sessions nionso ya bokɔti oyo ezali kosala mpe kobalola ba mots de passe mpo na ba comptes exposées. Soki o typer mot de passe na portail captif ya Wi-Fi ya lokuta to okoti na compte na nzela ya réseau ya rogue, fungola tableau de bord wana ya sécurité ya compte, finá Kobima na ba appareils nionso / Kolongola ba sessions actives, changer mot de passe na yo na phrase de passe unique, mpe congeler carte de crédit to débit nionso oyo okotisi nimero na yango.
5. Kosala audit mpe kolongola ba certificats ya misisa ya mabe, ba profils VPN, to mibeko ya boîte de réception. Tala ba paramètres ya magasin ya ba certificats ya système d’exploitation na yo mpe ya gestion ya dispositif mpo na ko vérifier que portail captive ekosaki yo te mpo na ko installer profil ya configuration ya mabe, mpe tala ba paramètres ya email na yo mpo na mibeko ya auto-forwarding oyo epesami ndingisa te.
6. Reboot mpe inspecter appareil mobile na yo soki o fingi "Trust" na kiosque USB. Soki o fingi "Trust This Computer" to o activer USB File Transfer/Debugging na station ya chargement public, activer Mode Avion, tala soki ba apps to ba profils oyo eyebani te oyo ezali na côté, mpe lakisa moyibi ya mbongo makasi to extorsion na ba policiers to na numéro ya urgence ya esika ofandi (911 na Etats-Unis mpe... Canada, 112 na Union européenne mobimba, 999 na Royaume-Uni, to tala banimero ya mbalakaka).

Wi-Fi ya bato banso mpe nzete ya eyano ya likambo ya chargement USB¶

flowchart TD
    Start["Suspected Public Wi-Fi or USB Charging Compromise"]
    ThreatType{"Which proximity vector occurred?"}
    WiFiBranch["Connected to Suspected Evil Twin Wi-Fi<br/>or Fake Captive Portal Splash Page"]
    USBBranch["Plugged Phone or Laptop Into Public USB Port<br/>or Used an Unattended Cable (Juice Jacking)"]

    WiFiAction1["1. Turn off Wi-Fi radio and tap 'Forget This Network'<br/>2. Switch to trusted 4G/5G cellular data"]
    WiFiPrompt{"Did you type credentials, payment card data,<br/>or install a profile/certificate?"}
    WiFiCompromised["ACTIVE CREDENTIAL / TRAFFIC COMPROMISE<br/>1. Revoke all active login sessions and refresh tokens<br/>2. Rotate passwords and check email forwarding rules<br/>3. Delete rogue Device Management profiles and Root CAs<br/>4. Freeze payment card and issue replacement number"]
    WiFiPassive["PASSIVE CONNECTION ONLY (HTTPS intact)<br/>1. Flush local DNS and ARP caches<br/>2. Enable audited VPN and Encrypted DNS (DoH/DoT)<br/>3. Monitor account login logs for 14 days"]

    USBAction1["1. Physically unplug USB cable immediately<br/>2. Do not use any cable left hanging in a kiosk"]
    USBPrompt{"Did you unlock the device and tap<br/>'Trust This Computer', 'Allow USB Debugging',<br/>or see rapid ghost typing on screen?"}
    USBCompromised["ACTIVE USB DATA OR HID KEYSTROKE BREACH<br/>1. Enable Airplane Mode to cut C2 network callbacks<br/>2. Check for rogue MDM profiles, accessibility apps, or shells<br/>3. Rotate passwords from a separate clean device<br/>4. Back up important photos/files and perform Factory Reset"]
    USBBlocked["OS USB RESTRICTED MODE PROTECTED DEVICE<br/>1. Reboot device to clear USB controller volatile state<br/>2. Charge using AC wall outlet brick or personal battery bank"]

    Start --> ThreatType
    ThreatType -->|Evil Twin Wi-Fi| WiFiBranch
    ThreatType -->|Public USB Port| USBBranch
    WiFiBranch --> WiFiAction1
    WiFiAction1 --> WiFiPrompt
    WiFiPrompt -->|Yes| WiFiCompromised
    WiFiPrompt -->|No| WiFiPassive
    USBBranch --> USBAction1
    USBAction1 --> USBPrompt
    USBPrompt -->|Yes| USBCompromised
    USBPrompt -->|No: Locked or Rejected| USBBlocked

Ndenge nini Wi-Fi ya Evil Twin na ba portails captifs ya rogue esalaka¶

Evil Twin ezali point d’accès sans fil ya lokuta oyo esalemi na attaquant na kosalelaka ordinateur portable, routeur portable ya audit multi-radio (lokola Wi-Fi Pineapple), Raspberry Pi, to esika ya smartphone oyo ebongwani oyo etiamaki na kati ya esika ya bato banso oyo bato bazali mingi. Na se ya norme Wi-Fi IEEE 802.11, ba kombo ya réseau public ya polele, eyebani na kombo ya Service Set Identifiers (SSIDs), ezali na zéro ya authentification cryptographique oyo ezali ko vérifier nani azali na kombo. Moto nyonso oyo afandi na ntaka ya mɛtrɛ 30 tii 100 longwa na yo na salon ya terminal to na lobby ya hôtel akoki ko diffuser réseau sans fil oyo ezali na kombo Airport_Free_WiFi, . Starbucks_Guest, . Marriott_Conference, to Inflight_WiFi.

Lokola ba appareils clients eponaka automatiquement point d’accès oyo ezali ko diffuser signal ya radio ya makasi koleka (emesami na décibel par rapport na milliwatt, to dBm) pona kombo ya réseau oyo ekokani, attaquant oyo afandi na 5 mètres (16 pieds) mosika na mesa na yo alongi facilement routeur ya plafond légitime na 25 mètres (82 pieds) na se ya couloir. Ata soki ozali déjà connecté na Wi-Fi ya vrai hôtel, ba attaquants ba transmettre souvent ba cadres spoofed 802.11 déauthentification ("deauth") oyo e déranger téléphone to ordinateur portable na yo na mwa tango moke na routeur légitime, ko obliger appareil na yo e reconnecter automatiquement na signal Evil Twin ya makasi ya attaquant sans que o remarquer.

Soki aparɛyi na yo esanganaki na point d’accès Evil Twin, mobundi azali kotambwisa porte ya Protocole ya Configuration ya Hôte Dynamique (DHCP) ya esika ofandi mpe résolveur ya Système ya kombo ya domaine (DNS) na yo, kotya yango na position Adversary-in-the-Middle (AitM) kati na dispositif na yo mpe internet.

Ba vecteurs minei ya attaque technique na Wi-Fi ya rogue¶

Atako Bobateli ya couche ya transport ya mikolo oyo (HTTPS / TLS 1.3) mpe HTTP Strict Transport Security (HSTS) epekisaka opérateur Wi-Fi ya lokuta kotanga na ndenge ya mpambampamba ba pages web chiffrées na ba navigateurs mise à jour, ba attaquants ba contourner HTTPS na nzela ya ba mécanismes minei ya sikisiki:

1. Portail captive Adversary-in-the-Middle (AitM) credential harvesting: Ntango nyonso oyo okokɔta na réseau ya hôtel, aéroport, to café, système d’exploitation na yo ezela ete fenêtre ya bokɔti Captive Portal ebima yango moko. Lokola ba portails captifs esalaka avant VPN na yo e connecter, ba usagers bazali conditionnés ya ko confier boîte ya login nionso oyo ekobima. Ba attaquants bayambaka ba clones ya pixel-perfect ya hôtel, compagnie aérienne, Microsoft 365, Google Workspace, Apple ID, to ba pages ya login ya ba médias sociaux oyo ezo tambola sima ya ba cadres ya reverse-proxy en temps réel (lokola Evilginx2 to Modlishka). Ntango ozali kokoma mot de passe na yo ya email mpe code ya 6 chiffres ya Authentification Multi-Facteur (MFA) na portail ya lokuta mpo na "Kofungola Wi-Fi ya ofele ya vitesse," proxy ya inverse ezo relayer ba credentiels na yo na fournisseur ya solo mpe ayibi cookie ya authentification ya session oyo ezongisami mbala moko libanda ya flux.
2. Malicious Root Certificate Authority (CA) mpe profil ya MDM: Portal captive ya lokuta ekoki kolakisa liyebisi ya entreprise to ya hôtel oyo ezali kondimisa oyo elobi: "Mpo na kotosa mibeko ya bokengi ya réseau, finá Tika mpo na ko installer certificat na biso ya SSL ya Wi-Fi SSL ya ntango moke / profil ya réseau." Soki ondimi certificat ya misisa to profil ya Gestion ya ba appareils mobiles (MDM), système d’exploitation na yo etalelaka mobundi lokola Authority ya Certificat oyo ekoki kotyelama motema, kopesa nzela na serveur proxy na bango mpo na kosala ba certificats SSL oyo ezali na ntina mpo na domaine nyonso ya banque to ya email mpe ko déchiffrer trafic HTTPS na yo nyonso na tango ya solo.
3. Liste ya réseau préférés (PNL) mpe KARMA/MANA auto-join sniffing: Tango Wi-Fi efungolami na poche to sac à dos na yo, téléphone to ordinateur portable na yo etindi mbala na mbala ba demandes ya sonde kolukaka ba réseaux oyo o joindre kala. Soki ozali na "Auto-Join" activé mpo na ba réseaux ouverts (lokola attwifi, . xfinitywifi, . Boingo_Hotspot, to Hotel_Guest), ba points d’accès ya ba rogues eyokaka ba sondes wana ya émission mpe dynamiquement e spawn réseau virtuel oyo ekokani na SSID nionso appareil na yo ezali koluka, ko connecter na kimia ordinateur portable to téléphone na yo tango efandi na sac na yo.
4. Mouvement latérale ya sous-réseau local (empoisonnement SMB, AirDrop, mDNS, na LLMNR): Ba réseaux publiques Wi-Fi oyo elongi te ko enforcer AP Client Isolation etie ordinateur portable na yo na segment ya réseau ya zone locale Couche-2 exactement ndenge moko na mopaya nionso mosusu na chambre. Ba attaquants ba scanner ba appareils voisins pona ba partages ya fichiers exposés Windows Server Message Block (SMB), Bureau à distance (RDP), Secure Shell (SSH), ba serveurs web ya développement ouvert (0.0.0.0:3000 to :8080), to kopesa poison na ba queries locales Link-Local Multicast Name Resolution (LLMNR) mpe Multicast DNS (mDNS) mpo na kokanga ba hashes ya mot de passe ya Windows NetNTLMv2.

Kokokanisa ba méthodes ya connexion sans fil na niveau ya sécurité¶

Salelá tableau oyo ya bokokanisi mpo na kotalela banzela na yo ya boyokani ntango ozali kosala mosika na ndako to na biro:

Bozongisi ya litambe na litambe nsima ya likambo ya Wi-Fi ya Evil Twin¶

Soki okangamaki na réseau Wi-Fi ya bato nyonso oyo ezali na ntembe, omonaki makebisi ya certificat ya navigateur (NET::ERR_CERT_AUTHORITY_INVALID), to ba informations oyo okotisi na portail captif sketchy, sala ba étapes minei oyo ya remédiation technique na molongo na nzela ya connexion cellulaire ya confiance:

Etape 1: Audit mpe longola ba profils ya configuration ya rogue mpe ba CA ya misisa¶

Yambo ya kobongola ba mots de passe nionso na appareil na yo, vérifier que attaqueur a installaki profil ya gestion ya ba appareils mobiles (MDM) oyo ewumeli te, configuration ya VPN ya lokuta te, to Autorité ya Certificat ya misisa oyo ekopesa bango nzela ya kotala ndenge ozali kokoma ba mots de passe na yo ya sika:

• Na iPhone mpe iPad ya Apple (iOS / iPadOS):
• Fungola Paramètres > Général > VPN & Gestion ya appareil. Longola se soki aparɛyi na yo ekambami na departema ya IT ya patron na yo, esengeli kozala na zéro Profils ya Configuration oyo etangami awa. Soki omoni profil moko oyo oyebi te, finá yango mbala moko, poná Longola Profil, tyá code de passe na yo, mpe zongisá telefone na yo.
• Na nsima, fungola Paramètres > Général > Na ntina na, kende na nse, mpe finá Paramètres de confiance certificat. Na nse ya Kofungola bondimi mobimba mpo na ba certificats ya misisa, vérifier que ba certificats ya misisa oyo mosaleli atie ebongwani te.
• Na ba smartphones na ba tablettes Android:
• Fungola Paramètres > Sécurité & confidentialité > Paramètres ya sécurité mingi > Encryption & credentiels > Credentiels ya confiance mpe changer depuis onglet Système na onglet Utilisateur.
• Certificat nionso oyo etangami na se ya onglet Mosaleli etiamaki na maboko na dispositif. Finá na certificat nyonso oyo eyebani te mpe poná Longola / Longola.
• Tala pe Paramètres > Sécurité & confidentialité > Paramètres ya sécurité mingi > Ba apps ya administrateur ya appareil pe sala que appli moko te oyo eyebani te ezala na ba privilèges ya administrateur ya appareil.
• Na ba ordinateurs portables ya Apple macOS:
• Fungola Paramètres ya système > Général > Gestion ya appareil (to Bomoto & Bobateli > Profils) mpe longola profil nionso ya configuration oyo eyebani te.
• Fungola Accès na porte-clé, tala ba porte-clé System mpe login na nse ya tab Certificats, mpe bolongola certificat nyonso oyo oyebi te oyo ezali na elembo ya bleu + icon ya confiance personnalisé.
• Na ba ordinateurs portables Microsoft Windows 10 na 11:
• Finá na esika bakomi Win + R, ya kokoma certmgr.msc, mpe finá Enter. Panza Bakonzi ya certification ya misisa oyo batyelaka motema > Ba certificats mpe bolongola certificat nionso ya misisa ya mabe oyo basengaki yo otia.
• Fungola Paramètres > Réseau & Internet > Proxy mpe vérifier que Salelá serveur proxy elakisami te na adresse IP ya attaquant ya libanda to .pac script ya kokoma.

Etape 2: Flush ba caches ya réseau DNS na ARP poisonné¶

Tango ozali ko connecter na routeur Evil Twin, serveur DHCP na DNS attaquant mbala mingi epesaka ba enregistrements DNS poisonné na ordinateur na yo na ba valeurs milayi ya Time-To-Live (TTL) donc redirection e persister ata sima ya ko changer ba réseaux. Effacer ba caches ya réseau local na yo mbala moko: - Na Windows: Fungola Command Prompt lokola Administrateur mpe tambuisa ipconfig /flushdns elandi na arp -d *. - Na macOS: Fungola Terminal pe tambola sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder. - Na iOS na Android: Bofungola Mode ya avion ON pendant 30 secondes, sima boma yango pe bo rebooter téléphone. - Na ba navigateurs web: Effacer Bililingi mpe ba fichiers oyo ekangami na cache mpe Ba cookies mpe ba données mosusu ya site mpo na ngonga 24 oyo eleki.

Etape 3: Kosilisa ba cookies ya session oyo ezali kosala mpe kobalola ba mots de passe¶

Soki okɔtaki na Google, Microsoft 365, Apple ID, ba médias sociaux, to compte personnelle nionso na kati ya fenêtre ya portail captif to tango ozali connecté na réseau esika certificat ya rogue ezalaki active: 1. Kobongola mot de passe na yo kaka ekoki mbala mingi te soki proxy inverse ya attaquant ayibi cookie na yo ya session après authentification to jeton ya refresh ya OAuth. 2. Kota na ba paramètres ya sécurité ya compte moko na moko oyo etalisami na nzela ya ba données cellulaires, kende na Sessions actives / Esika okoti / Appareils, mpe finá Kobima na ba sessions nionso. 3. Bambolá mot de passe ya kɔnti na fraze ya nzela ya makasi, oyo ekeseni na bilembo 16 kino 20 oyo ebombami na mokambi ya mot de passe. 4. Tala compte email na yo Forwarding mpe Inbox Rules / Filters (na Gmail to Outlook) mpo na kondimisa ete mobundi alonaki mobeko ya kimia te kotindika automatiquement mot de passe réinitialisation ya ba emails to kokende na ba alertes ya sécurité na Trash. 5. Bomatisa compte na yo Authentication Multi-Factor na Passkey to FIDO2 matériel clé (WebAuthn) oyo ekoki kozala na phishing te, oyo ekangami na ndenge ya cryptographie na kombo ya domaine ya solo.

Etape 4: Kokangama na ba cartes ya kofuta oyo ekotisami na ba portails captifs¶

Soki otyaki nimero ya carte de crédit to ya débit, date ya expiration, mpe code ya sécurité ya CVV na portail Wi-Fi oyo ezali suspect: 1. Fungola appli bancaire na yo mbala moko na ba données cellulaires mpe Lock / Freeze carte. 2. Benga nimero ya departema ya bokosi oyo ezali na nsima ya karte na yo, yebisá ete makambo ya karte yango ebebaki na portail oyo bakanisaka ete ezali ya kofinga, mpe sɛngá karte mosusu na esika na yango nimero ya sika ya karte ya chiffres 16 mpe CVV. 3. Senga na mopesi carte a réinitialiser ba jetons automatiques nionso ya Account Updater (Visa VAU / Mastercard ABU) po ba facteurs récurrents oyo bapesameli ndingisa te bakoka kolanda nimero na yo ya sika ya carte.

Ndenge nini Juice Jacking na ba câbles USB armées esalaka¶

Ba connecteurs standard Universal Serial Bus (USB), na kati na yango USB Type-A, Micro-USB, Apple Lightning, mpe USB Type-C, esangisaka ba lignes ya puissance électrique na ba broches ya transfert ya ba données bidirectionnelles na kati ya fiche moko: - Na boyokani ya 4 broches USB 2.0, Pin 1 (VBUS) ememaka +5 volts ya puissance DC mpe Pin 4 (GND) epesaka mabele ya kura, nzokande Pin 2 (D-) mpe Pin 3 ( .D+) komema ba signaux ya ba données différentielles entre ordinateur hôte na dispositif oyo ekangami. - Na connecteur USB Type-C ya 24 broches, pembeni ya minei VBUS ba broches ya puissance na ba broches minei ya mabele, fiche ezali na D+/D- ba paires ya ba données, SuperSpeed minei ya vitesse makasi TX/RX ba voies ya ba données (jusqu'à 40 Gbps), na Canal ya configuration (CC1/ .CC2) ba broches oyo esalelamaka pona ko négocier livraison ya puissance na ba rôles ya hôte/appareil.

Juice Jacking esalemaka tango monguna abongoli matériel oyo ebombami sima ya prise ya chargement USB public to atiki câble ya chargement armé oyo ekangami na kiosque public mpo ba voyageurs basalela yango.

Ba classes misato ya ba attaques ya chargement USB physique¶

flowchart TD
    USBPlug["User Plugs Device Into Public USB Port or Unknown Cable"]
    AttackClass{"What malicious hardware is behind the port or inside the cable?"}
    Class1["1. MTP / PTP / ADB Data Exfiltration Host<br/>Hidden SBC (Raspberry Pi / microcontroller) requests<br/>file sync, photo access, or backup extraction"]
    Class2["2. BadUSB / HID Keystroke Injection Implant<br/>Cable head (O.MG Cable / Hak5) enumerates as a<br/>USB Keyboard + Wi-Fi AP and types shell commands"]
    Class3["3. Electrical Surge ('USB Killer') Capacitor<br/>Boosts 5V DC into -200V DC high-voltage pulses<br/>dumped directly into the device data lines"]

    Defense1["Mitigated if OS stays locked (USB Restricted Mode)<br/>OR if user taps 'Don't Trust' / uses a Data Blocker"]
    Defense2["Bypasses 'Trust Computer' prompts on unlocked screens<br/>because OS automatically trusts USB keyboards;<br/>prevented ONLY by never using unknown cables/ports"]
    Defense3["Destroys motherboard USB controller instantly;<br/>prevented by using your own AC wall charger or battery bank"]

    USBPlug --> AttackClass
    AttackClass -->|Data Host| Class1
    AttackClass -->|HID Keyboard| Class2
    AttackClass -->|Voltage Spike| Class3
    Class1 --> Defense1
    Class2 --> Defense2
    Class3 --> Defense3

1. Exfiltration ya ba données mpe abuse ya débogage (MTP / iOS Pairing / ADB): Ordinateur oyo ebombami sima ya plaque ya mur USB esalaka lokola Hôte USB mpe ebandisaka handshake ya ba données likolo ya D+/D- ba pins. Soki mokumbi motuka afungolaki telefone na ye mpe abɛti "Trust This Computer" (iOS) to aponi "File Transfer / MTP" to "Allow USB Debugging" (Android), ordinatɛrɛ oyo ebombami ekoki kosala kopi ya bafɔtɔ, ba contacts, ba messages, mpe ba sauvegarde locale oyo ezali chiffré te, to spyware ya chargement côté na nzela ya Android Debug Bridge (ADB).
2. Injection ya touche HID (Human Interface Device) ("BadUSB" mpe O.MG Cables): Ba attaquants batikaka ba câbles modifiés (lokola O.MG Cables) oyo ekangami na ba prises ya aéroport to ya hôtel oyo emonanaka mpe e charger ndenge moko na ba cordes ya solo ya Apple, Samsung, to Anker USB-C mpe Lightning. Ebombami na kati ya coquille ya connecteur ya plastique ezali microprocesseur mpe émetteur-récepteur Wi-Fi. Ntango okɔtisi yango na ordinatɛrɛ ya moke to telefone oyo ekangami te, nsinga yango eyebisaka système d’exploitation na yo "Nazali clavier matériel USB standard." Lokola ba systèmes d'exploitation etie motema na ba claviers sans kolakisa prompt "Trust This Computer", câble ekoma mbala moko bankama ya ba touches na seconde (kofungola Terminal, PowerShell, to ba fenêtres ya navigateur) tango e déclenché na Wi-Fi.
3. Kobebisa matériel électrique ("USB Killer"): Ba câbles to ba ports modifiés oyo ezali na ba convertisseurs miniatures ya boost DC-à-DC e charger ba condensateurs à partir ya ligne électrique ya 5 volts mpe e décharger ba spikes électriques ya 200 volts mbala moko na se ya ba broches ya ba données, e friter libela puce ya contrôleur USB na carte logique.

Kokokanisa ba méthodes ya chargement public na ba défenses matérielles¶

Kobika na litambe na litambe nsima ya likambo oyo bakanisaki ete esalemaki na Juice Jacking to USB¶

Soki o brancher téléphone to ordinateur portable na yo na port USB public to câble oyo eyebani te, évaluer oyo esalemaki na écran na yo mpe landa niveau ya récupération oyo ekokani na yango:

Scénarios A: Écran na yo etikalaki kokangama, to obɛtaki "Kozala na confiance te".¶

iOS ya mikolo oyo (banda iOS 11.4.1) mpe Android (Android 9+) ezali na défense intégrée oyo babengaka Mode USB Restricted to Charge-Only USB Default. Ntango ozali kokɔtisa telefone oyo ekangami na hôte ya ba données USB, système d’exploitation ebatelaka ba lignes ya ba données USB oyo ekangami na ndenge ya logique mpe ebendaka kaka puissance électrique tii ntango okofungola écran mpe okobɛta polele "Trust" (mpe okotisa code de passe na yo mbala ya mibale na iOS) to obongoli notification USB na "File Transfer."

Soki obɛtaki ata mokolo moko te "Trust" mpe osaleli te câble oyo eyebani te ntango écran na yo ezalaki kofungolama: 1. Longola nsinga yango mbala moko. 2. Boma téléphone na yo mobimba, zela 30 secondes, pe fungola yango lisusu pona ko effacer mémoire volatile ya contrôleur ya port USB. 3. Bobongola na prise ya mur ya AC to na banque ya pile.

Scénarios B: Obɛtaki "Trust This Computer," ofungolaki USB Debugging, to omoni kokoma ya bilimu¶

Soki ofungolaki telefone na yo mpe obɛtaki "Trust" na station ya chargement publique, o activer Android USB Debugging, to o brancher câble oyo eyebani te na téléphone to ordinateur portable oyo ekangamaki te mpe omoni kokoma noki ya molimo: 1. Bólongola câble mpe activer mbala moko Mode Avion (to boma Wi-Fi mpe ba données cellulaires) mpo na kopekisa charge utile nionso ya fond injecté e contacter serveur ya commande-et-contrôle ya libanda. 2. Na iOS / iPadOS: - Kobɛta "Trust This Computer" ebimisaka enregistrement ya couplage cryptographique oyo epesaka ordinateur hôte nzela ya kozua ba sauvegarde, ba photos, mpe bisaleli ya développeur. - Mpo na kolongolama mbala moko baordinatɛrɛ nyonso oyo otyelaka motema na iPhone, fungola Paramètres > Général > Transfert ou Réinitialiser iPhone > Réinitialiser > Réinitialiser esika & confidentialité (oyo elongolaka ba couplage nyonso ya ordinatɛrɛ USB oyo otyelaka motema), mpe tyá elembo na Paramètres > Général > VPN & Gestion des appareils mpo na profil to appli ya développeur nyonso oyo otye sika. - Soki ozali ko suspecter installation ya ba spyware, sala sauvegarde kaka ya ba photos mpe mikanda na yo ya brut mpe sala Effacer toutes les contenus et paramètres mobimba, sima activer Mode ya blocage (Paramètres > Confidentialité & sécurité > Mode de blocage). 3. Na Android: - Fungola Paramètres > Système > Ba options ya développeur (soki activé), finá Revoquer ba autorisations ya débogage USB, mpe toggle Ba options ya développeur OFF. - Tala Paramètres > Ba applis > Tala ba apps nionso, Paramètres > Accessibilité, mpe Ba apps ya admin ya dispositif mpo na appli nionso oyo oyebi te oyo etiamaki na tango ya session USB. - Soki USB Debugging ezalaki autorisé na port ya rogue, sala sauvegarde ya ba photos mpe ba contacts ya ntina mpe sala Factory Data Reset.

Liste ya botali makasi ya mobembo ya miniti mitano mpo na batelefone mpe ba ordinateurs portables¶

• 1.1. Purge ba réseaux Wi-Fi ouverts oyo ebombami mpe désactiver Auto-Join: Bolongola ba kombo ya ba réseaux ouverts génériques (Airport_Free_WiFi, . Hotel_Guest, . Starbucks, . attwifi) na liste ya ba réseaux na yo oyo obombi mpe boma Senga kosangana na ba réseaux mpe Auto-Join Hotspot.
• 2.1.1. Configurer VPN audité na Kill Switch strict: Tyá client VPN ya lokumu na kosalelaka WireGuard to OpenVPN, mpe activer Kill Switch mpo trafic nionso ya internet ezala bloqué soki tunnel ya VPN ekiti.
• 3. Activer DNS chiffré (DNS-over-HTTPS / DNS-over-TLS): Activer DNS ya sécurité / DNS privé na navigateur na yo mpe na système d’exploitation na yo na nzela ya Cloudflare (1.1.1.1 / . one.one.one.one) to Quad9 ( ) .9.9.9.9 / . dns.quad9.net). Soki portail captive ya hôtel elongi te ko charger na ebandeli, boma Secure DNS pendant 30 secondes pona ko cliquer "Accepter Termes," sima zongisa Secure DNS na VPN na yo mbala moko.
• 4. Bokanga bopanzani ya réseau local: Botia ba profils Wi-Fi ya Windows na Réseau public, bofungola macOS Firewall + Mode ya kobombana, mpe botia AirDrop na Kaka ba contacts to Receiving Off.
• 5. Ezali na ntina mingi. Activer ba modes ya protection ya ba données USB: Na iPhone/iPad, vérifier Paramètres > ID ya elongi & Code de passe > Accessoires ezali toggled OFF (to activer Mode de blocage pona voyage ya risque makasi). Na Android, activer protection ya ba données USB mpe bomba Options ya développeur ekangami.

Mituna oyo batunaka mingi¶

Ba sources e vérifié¶

• Agence ya bokengi ya cybersecurité mpe ya infrastructure (CISA, Etats-Unis): * Liste ya vérification ya sécurité ya réseau mpe ya cybersécurité ya ba appareils mobiles sans fil mpo na ba voyageurs*.
• Centre national ya sécurité cybernétique (NCSC, Royaume-Uni): Wi-Fi publique: Ndenge ya kozala na bokengi na ba réseaux oyo okoki kotyela motema te mpe bokambi na ntina ya mobilité ya entreprise.
• Commission fédérale ya communication (FCC, Etats-Unis): Alerte ya ba consommateurs: "Juice Jacking" - Ba conseils ya ko éviter ba malware na moyibi ya ba données na ba stations de charge USB publiques mpe Connexions sans fil mpe ba conseils ya sécurité Bluetooth.
• Agence nationale de sécurité (NSA, Etats-Unis): Misala ya malamu mpo na kobatela ba réseaux sans fil mpe bokengi ya ba appareils mobiles mpo na mosala ya téléphone mpe mobembo.
• Agence ya Union européenne mpo na cybersécurité (ENISA, Union européenne): Mabongisi mpo na kobatela ba appareils mobiles, ba points ya Wi-Fi, mpe accès à distance.
• Institut national ya ba normes mpe technologie (NIST, Etats-Unis): Mabongisi mpo na kobatela ba réseaux locales sans fil (WLAN) (NIST SP 800-153).

Ba guides oyo etali yango¶

• MFA phishing na bypass ya monguna-na-kati
• Réponse ya violation ya ba données na ba fuites ya mot de passe
• Phishing na récupération ya compte compromise
• Kosala na mosika mpe na libateli uta na otɛlɛ
• Ba escroqueries ya aéroport na sécurité ya transit
• Ba numéros ya téléphone ya urgence na mboka