Free WiFi and charging stations can cost you more than you think

We've all been there: away from our usual routine, traveling for work or pleasure, when the phone battery drops into the red or we can't find a signal right when we need to check something. Public WiFi hotspots and charging stations are everywhere and feel like a lifeline, but it's worth understanding the security risks before you plug in or connect.

Public WiFi

Public WiFi networks are convenient, but they carry security risks worth knowing about.

• Lack of encryption and authentication: Many free WiFi networks, especially in public places like cafes or airports, offer little to no encryption or authentication. Data sent over the network is often unencrypted, so anyone else on the same network with bad intent can intercept and read sensitive information.
• Adversary-in-the-Middle (AitM) attacks: An attacker can set up a rogue access point that mimics a legitimate free WiFi network. When you connect to the fake network, all of your traffic passes through the attacker's device, where they can watch your activity, inject malware, or redirect you to malicious websites without your knowledge.
• Malware distribution: Criminals use unsecured free WiFi to distribute malware. By compromising a router or standing up a fake network, they can inject malicious code into unencrypted websites or downloads, infecting devices with viruses, ransomware, or spyware. That can lead to data theft, system damage, or further exploitation.

With "evil twin" networks, an attacker sets up a fake WiFi hotspot using the same name as a legitimate network in a busy spot like an airport, coffee shop, or convention center. Because many devices are set to automatically connect to a known WiFi name, you can join an evil twin network without noticing.

The best way to protect yourself is to avoid open public WiFi. Use your cell data as a hotspot, or a secured network, as much as possible.

Public charging stations

Few things cause more travel anxiety than a phone or laptop battery that's draining fast. We rely on those devices for business and personal communication, and to manage our itineraries, airline tickets, and rides once we arrive. A dead phone is always a hassle, and it's worse when you're away from home.

• Juice jacking: Unlike a standard electrical outlet, USB ports carry both power and data. A compromised public USB charging station can be modified to steal data from your device (photos, contacts, even financial information) or to install malware, spyware, or ransomware.
• Rogue chargers and cables: It isn't only the ports that can be compromised. Someone might leave behind an innocent-looking charging cable that's actually built to infect your device or steal data. These cables can look identical to a normal one but hide components that carry out the attack.

The best way to protect yourself is to plug into a standard electrical wall outlet with your own trusted power adapter and cable, or to carry a portable battery you've charged at home before you travel.

Need help?

For a free consultation and written estimate, send us a message.