New Assault Towards Wi-Fi – Schneier on Safety – Cyber Tech

New Assault Towards Wi-Fi

It’s referred to as AirSnitch:

Not like earlier Wi-Fi assaults, AirSnitch exploits core options in Layers 1 and a pair of and the failure to bind and synchronize a consumer throughout these and better layers, different nodes, and different community names resembling SSIDs (Service Set Identifiers). This cross-layer id desynchronization is the important thing driver of AirSnitch assaults.

Essentially the most highly effective such assault is a full, bidirectional machine-in-the-middle (MitM) assault, which means the attacker can view and modify information earlier than it makes its solution to the supposed recipient. The attacker might be on the identical SSID, a separate one, or perhaps a separate community section tied to the identical AP. It really works in opposition to small Wi-Fi networks in each properties and places of work and enormous networks in enterprises.

With the flexibility to intercept all link-layer visitors (that’s, the visitors because it passes between Layers 1 and a pair of), an attacker can carry out different assaults on increased layers. Essentially the most dire consequence happens when an Web connection isn’t encrypted­—one thing that Google just lately estimated occurred when as a lot as 6 % and 20 % of pages loaded on Home windows and Linux, respectively. In these circumstances, the attacker can view and modify all visitors within the clear and steal authentication cookies, passwords, cost card particulars, and some other delicate information. Since many firm intranets are despatched in plaintext, visitors from them can be intercepted.

Even when HTTPS is in place, an attacker can nonetheless intercept area look-up visitors and use DNS cache poisoning to deprave tables saved by the goal’s working system. The AirSnitch MitM additionally places the attacker within the place to wage assaults in opposition to vulnerabilities that is probably not patched. Attackers can even see the exterior IP addresses internet hosting webpages being visited and infrequently correlate them with the exact URL.

Right here’s the paper.

Tags: tutorial papers, cyberattack, man-in-the-middle assaults, Wi-Fi

Posted on March 9, 2026 at 6:57 AM •
4 Feedback