CAPEC Definitions
CAPEC Definitions / CAPEC-615
CAPEC-615: Evil Twin Wi-Fi Attack
Adversaries install Wi-Fi equipment that acts as a legitimate Wi-Fi network access point. When a device connects to this access point, Wi-Fi data traffic is intercepted, captured, and analyzed. This also allows the adversary to use adversary-in-the-middle (CAPEC-94) for all communications.
Severity:Low
Possibility:
Extended Description
No Extended Description.
Mitigations
Commercial defensive technology that monitors for rogue Wi-Fi access points, adversary-in-the-middle attacks, and anomalous activity with the mobile device baseband radios.
Relationships with other CAPECs
CAPEC-616: Establish Rogue Location
Prerequisites
None
Related Weaknesses
CWE-300: Channel Accessible by Non-Endpoint
