Tip Us Hey you, we are hiring! Join us if you are an author, developer or designer!

WiFi connections open to hackers: Researchers

18 October 2017 9

A team of Belgian researchers have discovered a new vulnerability in the WiFi network, which allows attackers to eavesdrop Wi-Fi traffic passing between computers and access points. Nearly 41% of all Android connections are vulnerable to the WiFi attack, according to the report.

The exploit is known as KRACK, or Key Reinstallation Attacks, and allows data being sent over WiFi network by interrupting the third step in a four-way “handshake” that creates a key for encrypted data. The vulnerability found in WPA2 is similar to that of earlier security standards like WEP and is believed to be one of the “biggest online security threats ever.”

The United States Computer Emergency Readiness Team contacted about 100 organizations ahead of the official announcement of the vulnerability.

US-CERT has become aware of several key management vulnerabilities in the 4-way handshake of the Wi-Fi Protected Access II (WPA2) security protocol. The impact of exploiting these vulnerabilities includes decryption, packet replay, TCP connection hijacking, HTTP content injection, and others. Note that as protocol-level issues, most or all correct implementations of the standard will be affected. The CERT/CC and the reporting researcher KU Leuven, will be publicly disclosing these vulnerabilities on 16 October 2017.

The details about the vulnerability will be released soon. Security researchers suggest that users who are concerned about the security of their connection should avoid using Wi-Fi entirely for now. The report states that people should use “HTTPS, STARTTLS, Secure Shell, and other reliable protocols” for encryption for now.

The vulnerabilities will be presented on November 1st in a talk titled “Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2” at a security conference in Dallas.


9

comments

WiFi connections open to hackers: Researchers
Write a comment...
Rickyro

HERE is how to hack and spy a cheating partner texts or whatsApp... Do you suspect your husband /girlfriend of having extra marital affairs or cheating on you? or do you need reliable hacker to spy on a phone REMOTELY? well most times your heart only needs more time/proofs to accept what your intuition/Gut feeling already suspect , My Friend introduce me to this "Hacking Professional" and Spyware link Directory Programmer his direct contacts williamscyberghost@gmail.com Though at first i was a bit skeptical, because is my first time, but he actually proved himself to be an honest phone Tech Savvy i've ever come across, He accessed my cheating ex wife Cell phone remotely with the Target phone number and few info only, with his software, and i was able to spy on all her text messages [both recent and deleted] whatsApp chats, [new/deleted]facebook messenger etc , retrieving emails messages and instagram passwords ,jail break iCloud information and all other social media apps on the Target phone, you can as well Track Target phone live location at anytime even deleted messages of past months will still be available to spy on the spy app dashboard, to be honest i was surprise with the Magic of His Spyware link and software and i'm so glad i found out everything going on that i'm unaware of, So i'm dropping my testimony and his contacts here for whoever who needs any Hacking related services contact him.
williamscyberghost@gmail.com Call, Text or WhatsApp +1602 456 1862

and tell him Ricky refer you

Rachael01

A great hacker is really worthy of good recommendation , Mark Williams really help me to get all the evidence i needed against my husband and i was able to confront him with this details from this great hacker, because i have all his activities divert into my phone and was able to see all his lies for years. to get an amazing service done with the help of Williams williamscyberghost@gmail.com Call, text or WhatsApp +1602 456 1862

Tell him Racheal refer you

hillary

Even though i have discourage my friends severally about hiring a private investigator to catch their cheating partners,
i resorted to hiring one during my divorce. My husband hid his affair too well and i had no evidence to prove his infidelity
to the court so i had to go back to my friend who am grateful didn’t listen to me back then to refer me to the hacker she
is working with and i told him my problem. His service are topnotch which made working with him very easy, he got me everything
i needed within 24 hours and it was amazing, i paid upfront cause the trust was already there and i got great results because
i currently have my husband’s messages diverted to my phone, call logs, Facebook messenger, WhatsApp, instant chat, Viber, Skype,
password, retrieved all his deleted messages.The best part about his service is that you do not need any physical access or
installation to the phone you wish to hack, so it was all hell break loose for my husband when i presented the evidence in court
and i got everything i deserve. you can contact him for help via his mail donarldjacksoncyberhost@gmail.com

Reblove

Thanks so much to Donald Jackson for helping me hack into my husband phone so i could see what he is up to and i was able to catch him red handed, now i am out and a lot happier credit goes to earlier mention hacker for a good job. If you are also interested in any hack job you can contact him via his mail – (donarldjacksoncyberhost@gmail.com) Tell him Rebecca refer you

Derrick09

It is easy to fall prey to incompetent hackers, but after reading this, i hope you do not ever have to be a victim of hackers who are not able to complete the job given to them. I was once a victim but not anymore and this is because i have found the best hacker ever and i wish to let you know that Hackmart is the best you can ever think of and he always deliver and he his reliable… contact hackmart242 @gmail.com Visit w ww. hackmart. org to learn more about their terms.

AshleyBravo

But as a security measure, it's a right call from the security people to say don't use your Wi-Fi connection. But in which part of the country is this threat active? Belgian researchers are doing the study.

RickyHudson

OMG... this is the biggest ever online threat? That's terrible to read. This means, it's more difficult to handle than malware or any similar threat.

Apple

Twitter Blue with verified tick goes live, shows you paid for it

Apple

10th Gen iPad is here with bigger display, USB Type-C, and 5G

Apple

Apple debuts 2022 iPad Pro with M2 chip, WiFi 6E, and 5G

Windows

Microsoft debuts Surface Laptop 5, Surface Pro 9, Surface Studio 2 Plus