38. Mobile Honeypot

• Technology advances made possible to create honeypot APs.

• Mobile honeypot is a malicious AP trying to lure nearby clients with the following vulnerability:

  1. Authorized corporate laptop connects to unauthorized AP -- at home or at a public hotspot network.

  2. Such client is known as client in adhoc mode.

  3. When the laptop is back in the office, it tries to reestablish connections.

  4. The laptop is probing for unauthorized network names, including those with known-vulnerable SSIDs, such as Free Public Wi-Fi.

  5. Some laptops can be probing for as many as 5 or more of the vulnerable SSIDs.

  6. Honeypot AP captures user credentials!