The Public Wi-Fi Dilemma
Alex is a sales representative traveling for work. He is at an airport and needs to access the company's customer relationship management (CRM) system to update a client's order. The airport offers free public Wi-Fi. Alex connects his laptop to the Wi-Fi and opens his web browser. He notices that the Wi-Fi network is named 'Airport_Free_WiFi' and is unsecured (no password required). He also sees another network named 'Airport_Free_WiFi_5G' that requires a password, which is posted on a sign nearby. Alex decides to use the unsecured network because it's easier. He logs into the CRM using his username and password, which are sent over the internet. After updating the order, he checks his personal email and sees a message from his bank asking him to verify a transaction by clicking a link. He clicks the link and logs into his bank account. Later, he notices unusual activity on his bank account.
1. What security risks did Alex take by using the unsecured public Wi-Fi? Explain how each risk could lead to the observed bank account issue.
Read the worked answer
- Eavesdropping (sniffing): On an unsecured network, anyone with basic tools can capture unencrypted traffic. When Alex logged into the CRM, his credentials were sent in plaintext (if the site didn't use HTTPS) and could be intercepted. Similarly, his bank login could be captured.
- Man-in-the-middle (MITM) attack: An attacker on the same network could intercept and alter communications. They could redirect Alex to a fake banking site (phishing) even if he typed the correct address, capturing his credentials.
- Rogue access point: The unsecured network might have been set up by an attacker to lure users. Alex connected to it, allowing the attacker to monitor all his traffic.
- Lack of encryption: Without encryption, all data Alex sent (including passwords) was vulnerable. The unusual bank activity likely resulted from stolen credentials used by an attacker.
- Phishing link: The email from the bank could have been a phishing attempt; clicking it and logging in on a compromised network gave attackers his bank credentials directly.
2. What should Alex have done differently to protect his data while working remotely?
Read the worked answer
- Use a VPN: A virtual private network encrypts all traffic, preventing eavesdropping even on unsecured Wi-Fi.
- Verify the network: Confirm the legitimate Wi-Fi name with airport staff; use the password-protected network if available.
- Avoid sensitive transactions: Refrain from accessing banking or sensitive work systems on public Wi-Fi unless absolutely necessary and secured.
- Check for HTTPS: Ensure websites use HTTPS (padlock icon) before entering credentials. However, HTTPS alone doesn't protect against MITM if the attacker has a fake certificate.
- Use mobile hotspot: Prefer tethering to his phone's cellular data, which is more secure.
- Be wary of emails: Do not click links in unsolicited emails; instead, navigate directly to the bank's website.
- Enable two-factor authentication: This would add a layer of protection even if credentials are stolen.