Rusange Wi-Fi rusange, ibibi byimpanga, hamwe n umutobe jacking¶

Ibibuga byindege, amahoteri, amaduka yikawa, ibigo byinama, hamwe n’ahantu nyabagendwa ni ahantu hambere ho guhiga ibitero bibiri bifitanye isano rya bugufi n’ibitero byibasiye umubiri: ** Ikibi cya Twin rogue Wi-Fi hotspots ** na ** Juice Jacking ** (ibyambu bya USB byishyuza USB). Iyo uhuza terefone yawe cyangwa mudasobwa igendanwa kuri neti igenzurwa nigitero cyangwa ugacomeka umugozi wawe ku cyambu cya USB cyahinduwe, uha umwanzi ikiraro cyumubiri cyangwa umuyoboro utaziguye kugirango uhagarike urujya n'uruza rwawe, gusarura ibyangombwa byawe byinjira, cyangwa gushimuta kuki zemeza ibyemezo.

Niba umaze kubona ko wanditse imeri yawe, kwinjira mubigo, cyangwa amakarita yinguzanyo muri hoteri iteye amakenga cyangwa kumurongo wikibuga cyindege, cyangwa niba terefone yawe yazamutse "Kwizera iyi Mudasobwa" mugihe winjiye muri kiosque yishyuza rusange, guhita ushobora guhagarika uwaguteye kugufunga kuri konti yawe.

Kora ubu¶

1. ** Hagarika ako kanya umuyoboro wa Wi-Fi cyangwa ucomekeshe umugozi wa USB.
2. ** Wibagiwe umuyoboro wa Wi-Fi utemewe kugirango igikoresho cyawe kidashobora kongera guhuza.
3. ** Hindura kuri enterineti yizewe yamakuru (4G / 5G) kugirango ubone konti zangiritse. ** Ntukoreshe umuyoboro wa Wi-Fi waho mugihe usubiramo ibyangombwa byawe. Koresha terefone yawe igendanwa cyangwa igikoresho cya kabiri kidahwitse.
4. ** Kuraho ibikorwa byose byinjira hanyuma uhindure ijambo ryibanga kuri konte iyo ari yo yose winjiye cyangwa wakoresheje.
5. ** Kugenzura imeri yawe yohereza imeri hamwe nibikoresho byinshi (MFA) byemewe.
6. ** Ongera usuzume kandi ugenzure igikoresho cyawe kigendanwa niba ukanze "Kwizera" kumashanyarazi rusange ya USB.

flowchart TD
    A["Ukekwaho kuba rusange Wi-Fi cyangwa USB kwishyuza"] --> B{"Ni irihe terabwoba ryabaye?"}
    B -->|"Uhujwe na Evil Twin Wi-Fi cyangwa portal mpimbano"| C["Zimya Wi-Fi ako kanya hanyuma ukande Wibagirwe"]
    B -->|"Shyira terefone mu cyambu rusange USB: Jacking Jacking"| D["Kuramo USB USB ako kanya"]
    C --> E{"Winjiye ijambo ryibanga, amakuru yo kwishyura, cyangwa wemeye icyemezo?"}
    E -->|"Yego"| F["Hindura kuri selire 4G / 5G hanyuma uhagarike amasomo akora"]
    F --> G["Hindura ijambo ryibanga, guhagarika ikarita yo kwishyura, gusiba ibyemezo byumuzi"]
    E -->|"Oya"| H["Fungura DNS cache, ushoboze VPN cyangwa DNS-hejuru-HTTPS, ukurikirane kwinjira"]
    D --> I{"Wakanze Kwizera Iyi Mudasobwa cyangwa Emerera USB Gukemura?"}
    I -->|"Yego"| J["Gushoboza Indege Mode, kura imyirondoro yibikoresho bitazwi, gusubiramo uruganda niba bikenewe"]
    I -->|"Oya: Imbaraga gusa cyangwa zahagaritswe"| K["Ongera uhindure terefone kugirango usibe USB interineti kandi ukoreshe AC urukuta rwa adapt"]

Ukuntu Ikibi Twin Wi-Fi hamwe nigitero cyibisambo bikora¶

An ** Ikibi Twin ** ni ahantu h'uburiganya bwinjira mu buryo butemewe bwashyizweho n’igitero ukoresheje mudasobwa igendanwa, router igendanwa (nka inanasi ya Wi-Fi), cyangwa ahantu hagendanwa kugira ngo yigane umuyoboro rusange wa Wi-Fi wemewe. Kuberako amazina y'urusobe rwa Wi-Fi (SSIDs) atemewe byemewe kumurongo ufunguye, umuntu wese wicaye mubyumba byindege cyangwa ikawa arashobora gutangaza umuyoboro witwa Airport_Free_WiFi, Starbucks_Guest, cyangwa Grand_Hotel_Conference.

Niba uwagabye igitero azamuye ibimenyetso bya antenne hafi yimeza yawe kuruta umurongo wa kaburimbo nyayo, terefone yawe cyangwa mudasobwa igendanwa izahita ihuza igikoresho cyabateye. Umaze guhuzwa na Twin Twin, uwagabye igitero yicaye muri ** Umuntu-wo-hagati (MitM) ** (nanone bita Umwanzi-hagati-hagati cyangwa AitM) hagati yigikoresho cyawe na interineti.

Imitego itatu imbere murusobe rwibibi¶

1. ** Gusarura ibyangombwa byimpimbano byasaruwe: ** Iyo winjiye muri hoteri yemewe cyangwa ikibuga cyindege Wi-Fi, mushakisha ya pop-up (portal portal) mubisanzwe igusaba gukanda "Emera amasezerano" cyangwa wandike numero yicyumba cyawe. Abagabye igitero bakoresheje iyi page hanyuma bongeramo ikibazo kivuga: * "Injira hamwe na Google yawe, Microsoft 365, Apple, cyangwa imbuga nkoranyambaga kugira ngo ukoreshe Wi-Fi yihuta ku buntu," * cyangwa usabe ikarita y'inguzanyo kugira ngo "ugenzure indangamuntu $ 1." Ikintu cyose cyanditse kururwo rupapuro gihita kijya kugaba igitero, akenshi ukoresheje ibikoresho-nyabyo-rexy-proxy yo kwiba Multi-Factor Authentication (MFA) ikimenyetso cyicyerekezo icyarimwe.
2. ** Kwambura DNS no kwambura SSL: ** Mugihe ibanga rya HTTPS rigezweho ririnda urujya n'urubuga rwinshi ndetse no kuri Wi-Fi itizewe, igitero kigenzura seriveri yawe DNS kirashobora kwerekeza kuri domaine wanditse, kumanura imiyoboro ya HTTP idafite ibanga, cyangwa kugushuka ngo ushireho umwirondoro mubi wa ** Root Certificate Authority (CA) kugirango ubone uburyo bwo kwinjira kuri enterineti " Niba ushyizeho icyemezo cyumuzi wibitero, barashobora gushishoza no gusoma banki zawe zose za HTTPS, imeri, hamwe nurujya n'uruza mumyandiko isanzwe.
3. ** Auto-join probe sniffing (KARMA / MANA ibitero): ** Niba terefone yawe cyangwa mudasobwa igendanwa ifite "Auto-Join" yafunguye imiyoboro yakoreshejwe mbere (nka attwifi cyangwa Hilton_Honors), igikoresho cyawe gihora gitangaza iperereza ushakisha ayo mazina aho ugiye hose. Ingingo za Rogue zumva ibyo wifuza kandi wigane umuyoboro uwo ariwo wose igikoresho cyawe gisaba, kiguhuza bucece imbere mu gikapu cyawe cyangwa mu mufuka utarinze gufungura menu ya Wi-Fi.

Intambwe ku yindi gukira niba wakoresheje umuyoboro mubi¶

Niba ubonye ko uhujwe na hotspot yimpimbano cyangwa wanditse amakuru yunvikana muri ecran yinjira, ukurikire izi ntambwe kugirango ukurikirane umurongo wizewe:

1. Reba kandi ukureho ibyemezo bitemewe cyangwa imyirondoro yibikoresho¶

Niba portal portal yagusabye gukanda "Emerera" cyangwa "Shyira" kuri sisitemu ya sisitemu mbere yo kuguha interineti, reba igikoresho cyawe ako kanya: - ** Kuri iPhone / iPad (iOS / iPadOS): ** Fungura ** Igenamiterere> Rusange> VPN & Gucunga ibikoresho **. Niba ubona umwirondoro uwo ariwo wose utazi (hanze yumwirondoro wa MDM wumukoresha wawe), kanda hanyuma uhitemo ** Kuraho Umwirondoro **. Ibikurikira, reba ** Igenamiterere> Rusange> Ibyerekeye> Icyemezo cyo Kwiringira Igenamiterere ** hanyuma urebe neza ko nta byemezo byimizi bizwi byahinduwe. - ** Kuri Android: ** Fungura ** Igenamiterere> Umutekano & ubuzima bwite> Igenamiterere ryinshi ry'umutekano> Encryption & ibyangombwa> Ibyangombwa byizewe> Umukoresha ** (amazina ya menu aratandukanye gato nuwabikoze). Kuraho ibyo ukoresha byose byashizweho mugihe cyamasomo yawe. - ** Kuri Windows / macOS: ** Kuri macOS, fungura ** Igenamiterere rya Sisitemu> Ibanga & Umutekano> Umwirondoro ** (hanyuma urebe ** Urufunguzo rwo Kwinjira> Imizi ya Sisitemu / Impamyabumenyi **). Kuri Windows, kanda Win + R, Ubwoko certmgr.msc, no kugenzura ** Abayobozi Bizewe Imizi Yizewe ** kubintu bishya byongeweho.

2. Kuraho kuki ikora kandi uzenguruke ijambo ryibanga ryangiritse¶

Niba winjiye muri Google, Microsoft, Apple, cyangwa isosiyete SSO imbere yimbuga mpimbano, uwaguteye ashobora kuba yaribye kuki yawe hamwe nibanga ryibanga. Guhindura ijambo ryibanga gusa ntibishobora kubirukana niba ikimenyetso cyamasomo kigumye gifite agaciro: - Injira muri konte yumutekano ya konte yawe uhereye kumibare ya selire, reba ** Aho winjiye muri / Ibikoresho bifatika **, hanyuma uhagarike buri somo utamenyereye. - Hindura ijambo ryibanga kurupapuro rwihariye kandi uzamure MFA yawe kurufunguzo rwumutekano wumutekano cyangwa passkey (FIDO2 / WebAuthn), ihuza ibanga ihuza izina nyirizina kandi ntishobora guterwa numuyoboro wibinyoma. Reba ubuyobozi bwacu kuri Uburobyi bwa MFA n'umwanzi-hagati-hagati ya bypass.

3. Funga amakarita yo kwishyura yangiritse¶

Niba ikibuga cyindege, urumuri, cyangwa hoteri ya Wi-Fi yagusabye inguzanyo cyangwa ikarita yikarita yo kubikuza hamwe na kode ya CVV, fungura porogaramu yawe ya banki igendanwa ako kanya ku makuru ya selire, funga cyangwa uhagarike ikarita, hanyuma uhamagare nimero iri inyuma yikarita yawe kugirango uyimenyeshe ko wangiritse kandi utegeke umusimbura numero yikarita nshya.

Uburyo Umutobe Jacking (kwishyuza nabi USB) ukora¶

Umugozi usanzwe wa USB (USB-A, Micro-USB, na USB-C) urimo amashanyarazi yombi ** (atwara amashanyarazi kugirango yishyure bateri yawe) na ** pine yamakuru ** (Differential D + / D- hamwe numurongo wihuta wa TX / RX wagenewe guhuza dosiye, amafoto, namabwiriza yo gusuzuma hamwe na mudasobwa).

** Umutobe wa Jacking ** ubaho mugihe abagizi ba nabi bahinduye ibyuma inyuma yicyambu rusange cya USB, inkingi yishyuza ikibuga cyindege, itara rya hoteri ya USB, cyangwa imodoka ikodesha USB data port. Mugukoresha microcomputer yihishe cyangwa chip igenzura nabi inyuma ya faceplate, uwagabye igitero arashobora kugerageza ibyiciro bibiri byibitero mugihe ucometse umugozi wawe muburyo bwa USB:

1. ** Gukwirakwiza amakuru no gukoresha nabi ikoreshwa nabi: ** Niba icyambu cyigana mudasobwa yakiriye kandi kigashuka uyikoresha gukanda ** "Wizere iyi Mudasobwa" ** (kuri iOS) cyangwa igushoboza ** "File Transfer / MTP / USB Debugging" ** (kuri Android), mudasobwa yihishe irashobora gukoporora byihuse umuzingo wa kamera, imibonano, inoti, hamwe nububiko bwibikoresho bidafite ibanga, cyangwa gusunika ibikoresho byabigenewe byangiritse.
2. ** HISHA (Igikoresho cyumuntu) Gutera inshinge hamwe nibitero byibikoresho: ** Ibyambu bibi bya USB byangiritse cyangwa insinga zimpimbano zisigaye zacometse muri kiosque rusange (nka O.MG Cables cyangwa Hak5 USB zashyizwemo) zirimo uduce duto twa Wi-Fi hamwe na microcontrollers mumutwe wa plastike uhuza plastike. Iyo ucometse muri mudasobwa igendanwa cyangwa terefone, umugozi wigira nka clavier ya USB yo hanze, wandika amajana atagaragara ya terefone cyangwa amabwiriza ya PowerShell kumasegonda kugirango ufungure inyuma yinyuma.

Gukomera terefone yawe na mudasobwa igendanwa mbere yuko ugenda¶

Fata iminota itanu mbere yo kuva ku kibuga cyindege, hoteri, cyangwa café kugirango ugene igenamiterere kugirango ibikoresho byawe birwaneho mu buryo bwikora:

1. ** Koresha telefone yawe bwite ya Hotspot aho gukoresha Wi-Fi rusange: ** Igihe cyose wakiriye selile, shyira mudasobwa igendanwa kuri terefone igendanwa (irinzwe na encryption ya WPA3) aho kwinjira muri hoteri cyangwa café Wi-Fi. Imiyoboro ya selire ikoresha ibyuma bya SIM / eSIM byerekana ibimenyetso bidashobora gukoronizwa byoroheje na hobbyist Evil Twin router.
2. ** Komeza VPN yagenzuwe hamwe na Kill Switch ifunguye: ** Niba ugomba gukoresha Wi-Fi rusange (urugero, ku ndege cyangwa muri salle yinama yo munsi yo munsi idafite ibimenyetso bya selire), fungura umuyoboro uzwi cyane wa Virtual Private Network (VPN) ukoresheje WireGuard cyangwa OpenVPN * mbere yuko ufungura porogaramu iyo ari yo yose cyangwa mushakisha, hanyuma ushobore guhagarika umurongo wa VPN.
3. ** Gushoboza DNS ihishe (DNS-hejuru-HTTPS cyangwa DNS-hejuru-TLS): ** Hindura amashusho yawe na sisitemu y'imikorere kugirango ukoreshe DNS ihishe (nka Cloudflare 1.1.1.1 cyangwa Quad9 9.9.9.9.
4. ** Sukura wabitse imiyoboro ya Wi-Fi hanyuma uhagarike Auto-Join: ** Siba imiyoboro ishaje ifunguye (Airport_Free_WiFi, Hotel_Guest, xfinitywifi.
5. ** Fungura uburyo bwa Lockdown Mode cyangwa Kurinda Data Kurwego rwo hejuru niba uri intego yibyago byinshi: ** Abanyamakuru, abayobozi, abanyamategeko, hamwe nabarwanashyaka bagenda banyuze munzira nyabagendwa zishobora guterwa na ** Lockdown Mode ** (kubikoresho bya Apple) cyangwa ** Kurinda cyane ** (kuri Android / Google), ikuraho burundu insinga za USB zifite insinga mugihe igikoresho gifunze.

Ibibazo bikunze kubazwa¶

VPN irandinda umuyoboro mubi Wi-Fi?¶

VPN izwi cyane ibika traffic traffic yose isiga igikoresho cyawe kugirango umukoresha wa Twin Twin adashobora gusoma amakuru yawe cyangwa gushimuta imiyoboro idafite ibanga. Ariko, VPN ntishobora kukurinda niba wanditse intoki ijambo ryibanga rya imeri cyangwa numero yikarita yinguzanyo kurupapuro rwimpimbano rwerekana impapuro mbere yuko VPN ihuza, ntanubwo ihagarika porogaramu iyo ushyizeho intoki icyemezo cyumuzi.

Nigute nabwira ikibuga cyindege cyangwa ikawa umuyoboro wa Wi-Fi nukuri?¶

Ntushobora kugenzura niba umuyoboro wa Wi-Fi ari ukuri gusa urebye izina riri muri menu yawe, kubera ko uwagabye igitero ashobora kuvuga izina ry’ibibi bya Twin kimwe na neti nyayo. Buri gihe saba umukozi izina ryukuri ryibanga nijambobanga, irinde imiyoboro idafite ijambo ryibanga rya WPA2 / WPA3 mugihe bishoboka, hanyuma uhite ufungura VPN yawe mugihe ihuriro rimaze gushingwa.

Byagenda bite ndamutse ninjije terefone yanjye ku cyambu cya USB, nkabona "Wizere iyi Mudasobwa," nkakanda "Ntukizere"?¶

Niba ukanze "Ntukizere" (cyangwa wirengagije icyifuzo mugihe ecran yawe yagumye ifunze) hanyuma ugahita ucomeka terefone yawe, sisitemu y'imikorere yawe yabujije imirongo yamakuru ya USB gushiraho ububiko bwawe. Ongera uhindure terefone yawe kugirango usibe ububiko bwigihe gito bwa USB mugenzuzi hanyuma uhindukire kumurongo usanzwe wa AC urukuta cyangwa banki ya bateri ishobora gutwara.

Imodoka ikodeshwa ibyambu USB ifite umutekano wo gucomeka terefone yanjye?¶

Sisitemu yo gukodesha infotainment sisitemu ihita ihuza urutonde rwawe, guhamagara, ubutumwa bwanditse, hamwe nibiranga ibikoresho bya Bluetooth mugihe ucometse kumurongo wamakuru wa USB hanyuma ugatanga uruhushya. Aho kugirango ukoreshe amakuru yimodoka USB icyambu, shyiramo imashini itwara amashanyarazi ya volt 12 yumucyo mumashanyarazi yingoboka, cyangwa ukoreshe USB ifata ibyuma bifatika hanyuma usibe umwirondoro wawe kuri menu ya infotainment yimodoka mbere yo gusubiza imodoka.

Kuyobora¶

• Uburobyi bwa MFA n'umwanzi-hagati-hagati ya bypass
• Kutubahiriza amakuru no gusubiza ijambo ryibanga
• Gukorera kure kandi ufite umutekano muri hoteri
• Uburiganya bwikibuga cyindege n'umutekano wo gutambuka
• Imibare yihutirwa ku isi