AfterDawn: Tech news

iPhones can be tricked into connecting to malicious Wi-Fi networks

Written by James Delahunty (Google+) @ 13 Jun 2013 23:46 User comments (2)

iPhones can be tricked into connecting to malicious Wi-Fi networks Researchers have detailed a weakness effecting some iPhone that can be exploited to force devices to connect to malicious Wi-Fi networks.
Even if the iPhone had never connected to a Wi-Fi network before, this attack method could still work, Skycure researchers found. The problem actually lies with the configuration settings installed by wireless carriers.

In order to provide customers with more reliable data connections on the move, Wi-Fi hotspots are setup in public places targeted at just their customers. For example, AT&T pre-sets iPhones to connect to networks with an SSID of "attwifi". The problem is simple, this connection can happen automatically with no user interaction.

"Setting up such Wi-Fi networks would initiate an automatic attack on nearby customers of the carrier, even if they are using an out-of-the-box iOS device that never connected to any Wi-Fi network," the researchers wrote.

A test carried out in a restaurant in Tel Aviv resulted in 60 connections to an imposter network within a minute. At the International Cyber Security Conference, Skycure did the same thing and recorded 448 connections within a two and half hour period.

Connecting to a rogue wireness network could put an iPhone user at risk of man in the middle attacks, where data can be stolen in transit, or links and content could be forged.

Tags: iPhone Apple
Previous Next  

2 user comments

114.6.2013 4:46

turn on "Ask to Join Networks"... Job Done.

I am sure researches could get in my house without a key if I didn't lock the door, same thing.

218.6.2013 8:37

Originally posted by bloke2000:
turn on "Ask to Join Networks"... Job Done.

I am sure researches could get in my house without a key if I didn't lock the door, same thing.
I agree with you, but since most users are dumb and lazy, having a locked door should be the default, shouldn't it?

"You know, it seems that quotes on the internet are becoming less and less reliable." -Abraham Lincoln.

Comments have been disabled for this article.

News archive