Business Daily Media

The Times Real Estate

.

As an ethical hacker, I can’t believe the risks people routinely take when they access the internet in public

  • Written by Christopher Patrick Hawkins, Lecturer in Cyber Security and Computer Science, University of Staffordshire
Wifi logo in digital illustration

In the modern world we are all constantly connected, but this comes with risks. As most cybersecurity specialists[1] will tell you, the biggest vulnerability in any system is the user – whether at home or work.

The most common ways[2] in which hackers break into systems are via attacks on users such as phishing, rather than by breaching technical infrastructure. As much as 94%[3] of all malware is delivered via email, while phishing is the primary means of attack in 41%[4] of all incidents. This risk is also increasing, with 75% of[5] security experts reporting an overall rise in cyberattacks year on year in 2023.

Many corporate IT teams have been spending heavily[6] on training users to be more wary of such attacks. However, this has tended to focus on best practice in the workplace. In public areas, where people’s guards might be lowered, it’s quite a different story.

I’ve recently seen several examples of this for myself. As a certified ethical hacker[7] with years of experience in cybersecurity and contributing to cybercriminal investigations, I can’t tell you how easy it is for these kinds of situations to be exploited by bad actors.

In the first incident, I was in a shop buying some household items. While I queued, staff were asking customers for email addresses to send them e-receipts for their items.

Woman on her phone
‘Yes to the discount code.’ Insta_photos[8]

This might sound innocent, and it’s surely better for the environment than paper receipts, but it could easily be exploited by a savvy hacker who might be listening. Combined with contextual information such as location, item and cost, they could craft a phishing email that would probably fool most people. It could be an invite to complete a feedback survey, for instance, or a discount code for their next visit to the same store.

On another occasion I was at a live concert. While we waited for the show to begin, an individual in front of me was browsing his phone. From observing for just a short time, I ascertained his name, job, address, vehicle, phone number and even bank balance. Again, this could have been used by a hacker in a number of malicious ways, including posing as the individual to steal their identity or even coercing them to act against their employer, say by threatening[9] to reveal sensitive information.

We therefore all need to be mindful of the information that we are exposing to strangers when we are in public. Equally, we need to think about what devices we are using, and what we are connecting them to.

While at the same concert, I saw numerous people connecting to the stadium wifi, which was totally unprotected and required no authentication. When you log in to an unsecured network, it exposes your device[10] to risks such as evil twin attacks[11].

Evil twin attacks involve the attacker creating a wifi hotspot, which can be set to any name they choose, such as “stadium wifi 2” or whatever. When an unprotected device connects to this network, the attacker can potentially steal the data they are transmitting.

It can also be used for other nefarious purposes such as snooping on confidential networks, injecting malware into downloads or “man-in-the-middle” attacks in which the hacker poses as the other person in a communication, again usually to steal information.

People can be exposed to similar threats on unsecured networks through another hacking ruse known as packet sniffing[12]. This is where a hacker uses a program to monitor the data moving over the network and steal information.

Wifi logo in digital illustration Connecting now … Alexander Supertramp[13]

You can avoid these risks by logging in from a virtual private network[14] (VPN), not that I saw anyone doing that at the concert. More generally, people can protect themselves from identity theft by, for instance, having anti-phishing systems[15] in their inboxes.

However, the easiest defence of all is to be alert to the risks and take sensible precautions in public. By protecting your data and devices, no matter where you are, you can avoid becoming one of the victims.

References

  1. ^ cybersecurity specialists (www.tandfonline.com)
  2. ^ most common ways (www.cobalt.io)
  3. ^ much as 94% (www.cobalt.io)
  4. ^ in 41% (www.cobalt.io)
  5. ^ 75% of (www.cobalt.io)
  6. ^ spending heavily (www.tandfonline.com)
  7. ^ ethical hacker (www.linkedin.com)
  8. ^ Insta_photos (www.shutterstock.com)
  9. ^ by threatening (www.digitalforensics.com)
  10. ^ exposes your device (www.tomshardware.com)
  11. ^ evil twin attacks (www.kaspersky.com)
  12. ^ packet sniffing (www.avast.com)
  13. ^ Alexander Supertramp (www.shutterstock.com)
  14. ^ virtual private network (en.wikipedia.org)
  15. ^ anti-phishing systems (www.csoonline.com)

Read more https://theconversation.com/as-an-ethical-hacker-i-cant-believe-the-risks-people-routinely-take-when-they-access-the-internet-in-public-240599

Empowering small businesses: Localsearch rolls out affordable digital solutions

New suite of digital solutions designed to boost visibility, engagement, and customer acquisition In response to a rapidly evolving digital lan...

Why Responsible Leadership is a Competitive Advantage for Small Businesses

In today’s fast-changing business landscape, leadership is evolving. While large corporations are reassessing their diversity, equity, and inclusi...

Why it’s a great time to include the EU in your export push

With the US market beset with unknowns, training your sights on mainland Europe in 2025 makes sound sense. Wondering whether the introduction o...

Success Isn’t About Labels—It’s About Mindset

In the lead up to International Women’s Day, I’ve been reflecting on my own success as a business owner and whether or not being a woman has playe...

Accelerate Action- Thryv champions women in business for International Women’s Day

Thryv® (NASDAQ: THRY), provider of the leading small business software platform, is celebrating International Women’s Day by shining a spotlight o...

Sydney Startup Launches AI Platform To Lead the Charge on Gender Pay Gap Action

EvenBetter.ai launches in Australia with First Customers Knight Frank and Fuji Australia Sydney-based startup EvenBetter.ai has today launched th...

Sell by LayBy