Beware of Phony Wi-Fi Hotspots

FRAMINGHAM, MA - The Town of Framingham warned residents to watch out for fake Wi-Fi hotspots that allow hackers to steal personal information.

These bogus hotspots pick up signals from legitimate connections (called a "middle-man attack) and allow hackers to insert themselves between the user and the we service. Hackers can then read emails, see browsing history and steal personal information from their victims.

Hackers usually add the word "Free" before the name of a rogue hotspot (see image above). Avoid connecting to any hotspot with the word "Free" before it. Brand names such as Linksys or Netgear are also suspect.

Here are some tips to help you avoid getting scammed courtesy of the the Town of Framingham.

• Look closely at any login screens that pop up when you open your web browser. Are images missing? Are words misspelled? Does the layout look different?
• Try to always use the encrypted version of a website. Make sure the website URL starts with HTTPS vs. HTTP. The website URL that starts with HTTPS is encrypted.
• Many legitimate free WiFi networks require you to agree to their Acceptable Use Policy (aka AUP) to use their WiFi. If missing, this is a potential flag.
• Most trustworthy free WiFi networks now demand a login before you can connect. If the one you are accessing does not, beware.
• You should avoid any public WiFi network that demands credit card details as part of the connection process – this is a classic sign of an online scam.
• Remember, you can ask the manager or an employee which network is the correct one and if it requires a login. They will provide the login.
• After you have connected to a public WiFI, your device may connect to it again automatically. Either set it to not connect automatically or disable wireless networking when not using it.
• All devices should have up-to-date antivirus software and it is particularly important if you are connecting to public WiFi.
• A personal firewall and spyware detection software is also very important. Always scan for malware after you use public WiFi.
• If you need to use public Wi-Fi for work and your company provides a VPN (Virtual Private Network) access, use it.
• DO NOT enter passwords or Financial Information even if you are connected to a legitimate Wi-Fi hotspot. Someone simply can be looking over your shoulder.

Photo courtesy of The Town of Framingham