Public Wi-Fi hacks, yakaipa mapatya hotspots, uye juice jacking¶

Nhandare dzendege, mahotera, zvitoro zvekofi, nzvimbo dzemisangano, uye nzvimbo dzekufambisa inzvimbo dzekutanga dzekuvhima dzemacyberattacks maviri ane hukama nepedyo: ** Evil Twin rogue Wi-Fi hotspots ** uye ** Juice Jacking ** (yakakanganisa veruzhinji USB yekuchaja zviteshi). Kana iwe ukabatanidza foni yako kana laptop kune inorwisa-inodzorwa isina waya network kana plug tambo yako mune yakagadziridzwa USB port, unopa muvengi bhiriji rakananga remuviri kana network kuti abvise traffic yako, tora zvitupa zvako zvekupinda, kana kubira makuki echokwadi echokwadi.

Kana iwe uchangobva kuona kuti wanyora email yako, kupinda kwekambani, kana ruzivo rwekadhi rechikwereti muhotera inofungirwa kana nhapwa yepanhandare yendege, kana kana foni yako yakabuda "Vimba Iyi Kombuta" nekukurumidza ichiri kubatirwa mukiosk yekuchaja yeruzhinji, kuvharirwa ipapo kunogona kumisa anokurwisa kuti akuvhare kubva mumaakaundi ako.

Ita izvi ikozvino¶

1. Bvisa tambo nekukasika kubva kunetiweki yeWi-Fi kana kubuditsa tambo yeUSB. Dzima Wi-Fi zvachose palaptop yako kana smartphone, kana kudhonza tambo yako yekuchaja kubva pachiteshi che USB cheveruzhinji ipapo.
2. Kanganwa hutsotsi hweWi-Fi network kuitira kuti mudziyo wako urege kuzvibatanidza pachako. Vhura marongero ako eWi-Fi, sarudza zita renetiweki rauri kufungidzira (SSID), wobaya Kanganwa This Network kana kudzima Auto-Join.
3. Chinja kuenda kunharembozha yedata yaunovimba nayo (4G/5G) kuti ive nemaakaundi akavhiringika. Usashandise chero network yeWi-Fi yemuno paunenge uchigadzirisa zvitupa zvako. Shandisa nharembozha yako yekubatanidza kana yechipiri isina kukanganiswa mudziyo.
4. Bvisa zvese zvinoshanda zvekupinda uye tenderedza mapassword eakaundi chero yawaisa kana kushandisa. Kana iwe wakanyora pasiwedhi mune yekunyepera nhapwa portal kana kupinda muakaundi pamusoro peiyo rogue network, enda kune iyo account kuchengetedza marongero, tinya ** Buda mumidziyo yese / Bvisa zvikamu zvinoshanda **, uye chinja password nekukurumidza.
5. Ongorora mitemo yako yekutumira tsambambozha uye midziyo yekusimbisa zvinhu zvakawanda (MFA). Ongorora marongero eemail ako eGmail, Outlook, kana emakambani emirau isina kutenderwa yekutumira otomatiki kana nhamba dzenhare dzekudzosera dzichangobva kuwedzerwa uye mapurogiramu echokwadi.
6. Tangazve uye ongorora nharembozha yako kana wadzvanya "Vimba" pane yeruzhinji USB charger. Kana iwe wakadzvanya "Vimba Iyi Komputa" kana kugonesa USB File Transfer/Debugging pane yeruzhinji kiosk, bvisa network kubva kune ese manetwork, tarisa maprofile asina kutenderwa kana maapuro akaiswa parutivi, uye gadzirira kutsigira mapikicha akakosha uye kugadzirisa fekitori kwakashata kana kwasimbiswa.

flowchart TD
    A["Inofungidzirwa yeruzhinji Wi-Fi kana USB kuchaja kukanganisa"] --> B{"Kutyisidzira kupi kwakaitika?"}
    B -->|"Yakabatanidzwa kune Evil Twin Wi-Fi kana fake musungwa portal"| C["Dzima Wi-Fi nekukasira wobaya Forget This Network"]
    B -->|"Yakabatanidza foni muchiteshi cheveruzhinji che USB: Juice Jacking"| D["Bvisa tambo ye USB nekukasira"]
    C --> E{"Wakaisa mapassword, data rekubhadhara, kana kugamuchira chitupa?"}
    E -->|"Hongu"| F["Chinja kune maserura 4G/5G uye dzora masesheni anoshanda"]
    F --> G["Chinja mapassword, omesa kadhi rekubhadhara, bvisa rogue midzi zvitupa"]
    E -->|"Kwete"| H["Flush DNS cache, gonesa VPN kana DNS-pamusoro-HTTPS, tarisa logins"]
    D --> I{"Wakabaya Vimba Iyi Kombuta kana Bvumira USB Debugging?"}
    I -->|"Hongu"| J["Gonesa Airplane Mode, bvisa isingazivikanwe mudziyo profiles, fekitori reta kana zvichidikanwa"]
    I -->|"Kwete: Simba chete kana kuvharirwa kukurumidza"| K["Reboot foni kuti ubvise USB interface mamiriro uye shandisa AC wall adapter"]

Iyo Evil Twin Wi-Fi uye nhapwa portal kurwisa inoshanda sei¶

Evil Twin inzvimbo yehutsotsi yekupinda isina waya inoiswa nemunhu anorwisa achishandisa laptop, router inotakurika (seWi-Fi Pineapple), kana nharembozha kutevedzera zviri pamutemo network yeWi-Fi yeruzhinji. Nekuti mazita etiweki eWi-Fi (SSIDs) haana kutenderwa nekusarudzika pamanetiweki akavhurika, chero munhu akagara mulounge yeairport kana chitoro chekofi anogona kutepfenyura network ine zita. Airport_Free_WiFi, Starbucks_Guest, kana Grand_Hotel_Conference.

Kana iye anorwisa achiwedzera chiratidzo cheantenna padyo netafura yako pane chaiyo sirin'i router, foni yako kana laptop inongobatana nemudziyo weanorwisa. Kana wangobatana neEvil Twin, anorwisa anogara mu Man-in-the-Middle (MitM) (inonziwo Adversary-in-the-Middle kana AitM) chinzvimbo pakati pechishandiso chako neinternet.

Iwo matatu misungo mukati meEvil Twin network¶

1. Fake Captive Portal credential kukohwa: Kana iwe uchijoinha zviri pamutemo hotera kana airport Wi-Fi, browser pop-up (yakatapa portal) inowanzokukumbira kuti udzvanye "Gamuchira Mitemo" kana kuisa nhamba yako yekamuri. Vanorwisa vanogadzira aya mapeji esplash vowedzera kukurumidza kuti: "Pinda neakaundi yako yeGoogle, Microsoft 365, Apple, kana social media kuti uvhure Wi-Fi yemahara yemahara," kana kukumbira kadhi rechikwereti kuti uwane "$1 identity verification." Chero chipi zvacho chakataipa papeji iyoyo chinoenda chakananga kune anorwisa, kazhinji uchishandisa chaiyo-nguva reverse-proxy maturusi kubira yako Multi-Factor Authentication (MFA) sesheni tokeni panguva imwe chete.
2. DNS spoofing uye SSL kubvisa: Nepo encryption yemazuvano yeHTTPS ichidzivirira traffic yakawanda pawebhu kunyangwe paWi-Fi isingavimbike, munhu anokurwisa anodzora DNS server yako anogona kutungamira nzvimbo dzaunonyora, kudzikisira HTTP isina kuvharirwa links, kana kukunyengedza kuisa ine hutsinye Root Certificate Authority (CA) profile ("Isa chengetedzo yeinternet"). Kana iwe ukaisa chitupa chemudzi weanorwisa, vanogona decrypt uye kuverenga yako yese HTTPS yekubhengi, email, uye yebasa traffic mune yakajeka mavara.
3. Auto-join probe sniffing (kurwiswa kweKARMA/MANA): Kana foni yako kana laptop yako ine "Auto-Join" yakabatidzwa kune yakamboshandiswa yakavhurika network (senge attwifi kana Hilton_Honors), mudziyo wako unogara uchitepfenyura maprobe uchitsvaga iwo mazita kwese kwaunoenda. Rogue yekuwana nzvimbo teerera kune izvo zvikumbiro uye tevedzera chero network yauri kukumbira mudziyo wako, ichikubatanidza chinyararire mukati mebhegi rako kana muhomwe pasina kana iwe wakambovhura yako Wi-Fi menyu.

Nhanho-ne-nhanho kupora kana iwe wakashandisa Evil Twin network¶

Kana iwe ukaona kuti wakabatana nehotspot yekunyepedzera kana kutaipa data inonzwisa tsitsi mune inofungirwa login sikirini, tevera matanho aya kuitira pamusoro peyakavimbika cellular connection:

1. Tarisa uye bvisa zvitupa zvisina kunaka kana maprofile emudziyo¶

Kana iyo nhapwa portal yakakukurudzira kudzvanya "Bvumira" kana "Isa" pane yekukurumidza system usati wakupa iwe internet, tarisa mudziyo wako nekukurumidza: - Pa iPhone / iPad (iOS / iPadOS): Vhura ** Zvirongwa> Zvakawanda> VPN & Chishandiso Management**. Kana iwe ukaona chero chimiro chegadziriso chausingazive (kunze kweiyo yepamutemo MDM mbiri yewaunoshandira), ibate uye sarudza **Bvisa Mbiri **. Tevere, tarisa ** Zvirongwa > Zvakawanda > Nezve > Setifiketi Kuvimbika Settings ** uye ita shuwa kuti hapana zvisingazivikanwe midzi zvitupa zvinobatidzwa. - Pa Android: Vhura ** Zvirongwa > Chengetedzo & kuvanzika > Mamwe chengetedzo marongero > Encryption & zvitupa > Yakavimbika magwaro > Mushandisi ** (menu mazita anosiyana zvishoma nemugadziri). Bvisa chero zvitupa zvakaiswa mushandisi zvakaiswa panguva yako. - ** PaWindows / macOS: ** PamacOS, vhura ** System Settings > Yakavanzika & Chengetedzo > Profiles ** (uye tarisa ** Keychain Kuwana > System Midzi / Zvitupa **). PaWindows, dzvanya Win + R, mhando certmgr.msc, uye ongorora ** Trusted Root Certification Authorities ** kune zvichangobva kuwedzerwa.

2. Bvisa makuki anoshanda uye shandura mapassword akakanganiswa¶

Kana iwe ukasaina muGoogle, Microsoft, Apple, kana yemubatanidzwa SSO mukati meyekunyepera nhapwa portal, murwisi angangoba cookie yako yechikamu pamwe nepassword yako. Kungoshandura password yako hakugone kuvadzinga kana chiratidzo chechikamu chikaramba chiri kushanda: - Pinda muakaundi yako yekuchengetedza dashboard kubva kunharembozha data, tarisa Kwawasaina mukati / Zvishandiso zvinoshanda, uye womisa chikamu chese chausina kujaira. - Chinja password yako kune yakasarudzika passphrase uye kukwidziridza MFA yako kune hardware chengetedzo kiyi kana passkey (FIDO2 / WebAuthn), iyo cryptographically inosungirira kune chaiyo zita rezita uye haigone kubirwa nekunyepera nhapwa portal. Ona gwara redu pa MFA phishing uye muvengi-pakati-yepakati bypass.

3. Kiya makadhi ekubhadhara akanganisa¶

Kana nhandare yendege, inflight, kana hotera Wi-Fi portal yakakumbira nhamba yako yekiredhiti kana yedhibhiti kadhi uye CVV kodhi, vhura nharembozha yako yekubhengi app nekukurumidza pane cellular data, kukiya kana kumisa kadhi, uye fonera iyo nhamba iri kuseri kwekadhi rako kuti utaure kuti yakakanganisika uye raira yekutsiviwa nenhamba yekadhi nyowani.

Mashandisiro anoita Juice Jacking (yakashata USB kuchaja) inoshanda¶

Makambo e USB akajairwa (USB-A, Micro-USB, uye USB-C) ane ese arimapini emagetsi (anotakura magetsi kuchaja bhatiri rako) uye mapini edata (Differential D+/D- uye mitsetse yeTX/RX inomhanya kwazvo yakagadzirirwa kuyananisa mafaera, mapikicha, uye mirairo yekuongorora nekombuta).

Kuvharira Muto kunoitika kana matsotsi akanganisa midziyo kuseri kwechiteshi chemadziro cheUSB cheveruzhinji, mbiru yekuchaja panhandare yendege, mwenje wepahotera USB slot, kana mota yekurenda USB data port. Nekuisa waya yakavanzika microcomputer kana hutsinye controller chip kuseri kwefaceplate, anorwisa anogona kuedza mapoka maviri ekurwiswa kana iwe ukavhara tambo yako zvakananga mu USB slot:

1. Kuburitswa kwedata uye kukanganisa kukanganisa: Kana iyo chiteshi ikatevedzera komputa inotambira uye ichinyengedza mushandisi kubaya "Vimba Iyi Kombuta" (paIOS) kana kugonesa "Faira Kutumira / MTP / USB Debugging" (pa Android), komputa yakavanzika inogona kukurumidza kukopa kamera yako roll, vanobatika, manotsi, uye isina kunyorwa bhadhara inokuvadza mabhakiti pamudziyo.
2. HID (Human Interface Device) kiyiroki jekiseni uye kurwiswa kwehardware: Madoko e USB epamberi kana tambo dzemanyepo dzakasiiwa dzakabatanidzwa mumakiosks eruzhinji (seO.MG Cables kana Hak5 USB maimplants) ane machipisi madiki akaiswa eWi-Fi nemamicrocontroller mukati memusoro wepurasitiki. Kana yabatanidzwa mulaptop kana foni, tambo inonyepedzera kunge yekunze USB kiibhodhi, ichinyora mazana ezvisingaonekwe terminal kana PowerShell mirairo pasekondi kuti uvhure kure kumashure.

Kuomesa foni yako nelaptop usati wafamba¶

Tora maminetsi mashanu usati waenda kunhandare yendege, hotera, kana kofi kuti ugadzirise marongero aya kuti zvishandiso zvako zvizvidzivirire zvoga:

1. Shandisa Hotspot yefoni yako pachinzvimbo cheWi-Fi yeruzhinji: Pese paunenge uine nhare yekugamuchira, isa laptop yako kunharembozha hotspot yako (yakachengetedzwa neWPA3 encryption) pane kujoinha hotera kana café Wi-Fi. Maserura network anoshandisa hardware SIM/eSIM cryptographic authentication iyo isingagone kugadzirwa zvishoma nehobbyist Evil Twin router.
2. ** Chengetedza VPN yakaongororwa ine Kill Switch yakabatidzwa: ** Kana uchifanira kushandisa yeruzhinji Wi-Fi (semuenzaniso, mundege kana muhoro yepasi pasi isina chiratidzo chenhare), batidza ine mukurumbira Virtual Private Network (VPN) uchishandisa WireGuard kana OpenVPN * usati wavhura chero maapplication kana mabhurawuza, uye gonesa VPN's Kill Switch saka traffic yakavharika kana yakavharika nzira.
3. Gonesa Encrypted DNS (DNS-over-HTTPS kana DNS-over-TLS): Gadzirisa bhurawuza rako uye sisitimu yekushandisa kuti ushandise yakavharidzirwa DNS (senge Cloudflare 1.1.1.1 kana Quad9 9.9.9.9) saka Wi-Fi router haigone kuvhura kana kukanganisa mazita emadomasi mudziyo wako unotarisa kumusoro, asi ziva kuti ungangoda kudzima DNS yakavharidzirwa kwemasekonzi makumi matatu kuti uise peji repamutemo rekupinda muhotera usati waibatidza zvakare.
4. ** Purge yakachengetedzwa yakavhurika Wi-Fi network uye dzima Auto-Join: ** Delete ekare akavhurika network (Airport_Free_WiFi, Hotel_Guest, xfinitywifi) kubva pane yako yakachengetedzwa network runyorwa, dzima "Bvunza Kujoinha Networks," uye isa laptop yako firewall ku ** Ruzhinji / Stealth Mode ** (kuvharira kunouya faira kugovera, AirDrop kubva ku "Munhu wese," uye yemuno network kuwanikwa).
5. Batidza Lockdown Mode kana Advanced Data Dziviriro kana uri munhu ane njodzi huru: Vatori venhau, vatungamiriri, magweta, uye varwiri vanofamba nemunzvimbo dzine njodzi huru vanofanirwa kugonesa Lockdown Mode (paApple zvishandiso) kana Dziviriro Yepamberi (pa Android/Google), iyo inodzima zvachose mawaya e USB data kubatanidza mudziyo uchikiyiwa.

Mibvunzo inowanzo bvunzwa¶

Ko VPN inondidzivirira kubva kune Evil Twin Wi-Fi network?¶

Iyo ine mukurumbira VPN inovharira yese internet traffic ichisiya mudziyo wako kuitira kuti Evil Twin opareta haagone kuverenga yako data hova kana kubira kubatanidza kusina kuvharwa. Nekudaro, VPN haigone kukudzivirira kana iwe ukanyora pasiwedhi yako yeemail kana nhamba yekadhi rechikwereti mune yekunyepa yevasungwa portal splash peji VPN isati yabatana, uye haimise malware kana iwe ukaisa nemaoko chitupa chemidzi.

Ndingaziva sei kuti ndeipi airport kana kofi shopu yeWi-Fi network ndiyo chaiyo?¶

Iwe haugone kuratidza huchokwadi hweWi-Fi network nekungotarisa zita riri mumenyu yako, nekuti anorwisa anogona kutumidza Evil Twin hotspot zvakafanana kune network chaiyo. Gara uchibvunza mushandi nezvezita retiweki chaiyo uye password, dzivirira network isina WPA2/WPA3 password encryption pazvinogoneka, uye nekukasira batidza VPN yako nekukurumidza kana kubatana kwatanga.

Ko kana ndikabaya foni yangu muchiteshi che USB yendege, ndoona "Vimba neKombuta iyi," ndikadzvanya "Usavimbe"?¶

Kana iwe ukadzvanya "Usavimbe" (kana kufuratira kukurumidza uku chidzitiro chako chakaramba chakakiiwa) uye ukaburitsa foni yako nekukasira, sisitimu yako yekushandisa yakavharira mitsara yedata re USB kubva pakukwira kwako. Ingo tangazve foni yako kuti ibvise ndangariro yayo yenguva pfupi USB controller uye chinja kune yakajairwa AC kumadziro kubuda kana inotakurika bhatiri bhangi.

Mota yekurenda USB madoko akachengeteka here kubaya foni yangu mukati?¶

Masevhisi ekurenda mota infotainment masisitimu anowiriranisa otomatiki mazita ako ekufonera, nhare dzekufona, mameseji, uye maBluetooth zviziviso zvemudziyo paunobaira mudhibhodhi USB data port uye uchipa mvumo. Panzvimbo pekushandisa USB port yemotokari, batanidza 12-volt cigarette remagetsi adapter mune yekuwedzera magetsi socket, kana shandisa iyo chaiyo USB data blocker uye dzima chimiro chako kubva kumota infotainment menyu usati wadzosera mota.

Mazano anoenderana¶

• MFA phishing uye muvengi-pakati-yepakati bypass
• Mhinduro yekutyora data uye password inodonha
• Kushanda kure uye zvakachengeteka kubva kuhotera
• Airport scams uye kuchengetedzwa kwekufamba
• Nhamba dzepasi rose dze emergency