기본 콘텐츠로 건너뛰기

These are the 10 airports where you're most likely to be hacked

  • Millions of travelers are vulnerable to cyberattack if they join public Wi-Fi networks in airports, according to a new report by Coronet, a cybersecurity company. 
  • Here's what experts say to do to avoid cyberattack and what to do if you've joined a public Wi-Fi network in the past.
Sam Hodgson | Bloomberg | Getty Images
Travelers walk through San Diego International Airport in San Diego.

There's a bigger danger lurking in U.S. airports than mediocre meals: public Wi-Fi networks.
The convenience of these easy ways to connect online is often masked by the fact that many are unencrypted, insecure or improperly configured, according to a recent study by Coronet, a cybersecurity company. If that's the case, it is much easier for hackers to access your device and install malicious software, steal your passwords or login information and download other data such as emails.
Hacking, which includes phishing, ransomware, malware and skimming, is the most common type of data breach and accounts for 60 percent of attacks, according to a 2017 study by the Identity Theft Resource Center. These attacks can lead to identity theft, which along with debt collection, imposter scams and other kinds of fraud, cost consumers $905 million in total losses in 2017, according to the Federal Trade Commission.
To rank airports by their threat level, Coronet looked at data from the 45 busiest American airports over five months at the beginning of the year. Then, it assigned each airport a threat index score based on the vulnerability of devices and risk of networks used.
“The main reason airports are problematic is because most people are taking convenience over security,” said Dror Liwer, chief security officer and co-founder of Coronet.

These are the top 10 worst airports for cybersecurity 

Ranking
Airport
City
State
Threat Index Score
1San Diego International AirportSan DiegoCA10
2John Wayne Airport- Orange County AirportSanta AnaCA8.7
3William P Hobby AirportHoustonTX7.5
4Southwest Florida International AirportFort MyersFL7.1
5Newark Liberty International AirportNewark NJ7.1
6Dallas Love Field DallasTX6.8
7Phoenix Sky Harbor International AirportPhoenixAZ6.5
8Charlotte Douglas International AirportCharlotteNC6.4
9Detroit Metropolitan Wayne County AirportDetroitMI6.4
10General Edward Lawrence Logan International AirportBostonMA 6.4
Source: Coronet 

What's at risk on public Wi-Fi

There are three major things that you're putting at risk when connecting to a public Wi-Fi network, Liwer says.
1. Device
Many malicious public Wi-Fi networks look like any other network, according to Liwer. But when you click on ‘accept terms and conditions’ to join, you may be installing malware on your device.
2. Credentials
If you’ve connected to a dangerous network, you could be a target for Wi-Fi phishing. This is when a hacker makes a webpage that looks exactly like another one, such as the sign-in for your work email, according to the Federal Trade Commission. When you enter your username and password to access your email, you’re actually entering your information into a hacker’s site.
3. Data
This is especially important for business travelers who may be working on the go, Liwer said. If you are on a hacker’s network and transferring data to or from a coworker, it is all going through the attacker’s devices. He or she can then do with it what they please, said Liwer.

How to avoid a cyberattack

To keep your devices and sensitive information safe, the best thing you can do is refrain from joining any public Wi-Fi networks.
“The instinct is that you’re going to jump on,” Liwer said. "Connectivity today is like water and oxygen, we can’t survive without it."
If you can't keep yourself from your online life, even for brief periods of time when you are traveling, there are a few other things you can do. You should make sure that the systems on your devices are up to date, and that they include software to protect from malicious networks.
Once you have such software installed, actually listen to it, said Liwer. If it tells you that a network is risky, don't join it. While it might be tempting to check your email, make a phone call or even upload a picture to Instagram, it could have unintended and costly consequences for your family or company.

What to do after connecting to a risky network

If you’re worried that you’ve joined a public network that might have left you vulnerable to a cyberattack, there are a few things you can do after the fact, Liwer said. First, establish if there is malware on your device and remove it.
Next, Liwer says to change all of your passwords to ones that are difficult to replicate, even if it's painful to do so.
“Your daughter’s name and her birthday is not a good password,” Liwer said.
His last piece of advice changes if you’re a private person or a corporation. Individuals should check to see if their identity has been stolen. For corporations, it’s a bit more complicated to detect if someone is using stolen corporate data. Liwer recommends using software to monitor suspicious behavior on the company server.
Liwer also said to be careful even if you are in an airport or city with a good cybersecurity score or ranking. Just because an area has been deemed low-risk doesn’t mean that hackers aren’t there, or won’t target that place in the future.
“When you are using public Wi-Fi networks, you should always consider your safety first,” said Liwer. "It’s a real threat, not a theoretical danger."

댓글

이 블로그의 인기 게시물

지문 넘어 정맥·홍채로...4000억원 '생체인증' 선점경쟁

4000억원 규모 국내 생체인증 시장을 선점하기 위해 관련 업체 경쟁이 치열하다. 생체인증시스템이 현금자동입출금기( ATM )부터 공항 신분확인, 기업 출입관리까지 다양한 분야로 확대된다. 지문인증을 넘어 손바닥, 손가락 정맥(장정맥, 지정맥)과 안면, 홍채 등 다양한 신체 부위를 활용한 인증 솔루션이 각광 받는다. 25일 업계에 따르면  Sh 수협은행은 장정맥 기반 금융서비스를  ATM 에 먼저 적용한다. 자체 기기에 도입하는 데 그치지 않고, 장정맥 인증 확산을 위해 타행· GS 리테일과 제휴도 추진한다.  GS 25 편의점 내  ATM 에서 장정맥 인증으로 입·출금, 계좌이체 등이 가능해진다. 신협중앙회는 손가락 정맥패턴을 이용한 '지정맥' 인증 시스템을 고객 간편결제 서비스에 도입하는 방안을 검토한다. 지난해 시스템 통제와 임직원 확인용 지정맥 인증을 사내 도입했다. 생체인증은 금융권 중심으로  ATM 과 개인금고, 공항, 기업 출입 등 다양한 곳에 활용된다. 한국후지쯔는 신한은행 시작으로 국민은행, 우리은행,  NH 증권, 롯데카드, 케이뱅크 등에 장정맥 인증 서비스 '팜시큐어'를 공급했다. 제주·김포공항에 장정맥을 이용한 실명확인 시스템을 구축했다. 동서석유화학,  SK 텔링크 등 일반 기업도 도입했다. LG 히다찌는 지정맥 인증 서비스를 신협중앙회 사내통제시스템뿐 아니라  BNK 부산은행 스마트  ATM 에도 공급했다. 부산은행은  ATM 뿐 아니라 은행창구 등에도 지정맥을 활용한다.  LG 히다찌는 신한카드, 나이스정보통신 등과 업무협약을 맺고 오프라인 간편결제로 지정맥 활용 준비 작업에 나섰다. 계명대 동산의료원과도 업무협약을 맺고 병원 인증시스템 도입도 검토한다. 국내 스타트업 위닝아이는 카메라를 이용한 손바닥 인증 기술을 전북은행 '뉴스마트뱅킹', 한화손해보험 '스마트인슈', 신영증권 등에 공급했다. 현대모비스와 손잡고 차량용 인증 기술 개...

Cold Wallet Vs. Hot Wallet: What’s The Difference?

You may have heard about cold and hot digital wallets but do you know how they are different from each other? The simplest way to describe the difference between a cold wallet and a hot one is this: hot wallets are connected to the internet while cold wallets are not. Most people who hold digital assets have both cold and hot wallets because they are designed for different purposes. Hot wallets are like checking accounts while cold wallets are similar to savings accounts. People who have digital assets keep a small amount of money in their hot wallets for purchasing stuff. They keep the vast majority of their digital coins in their cold wallet. If you like Medium articles in video form, you’re in luck: SECURITY Q: Why do people keep most of their digital coins in a cold wallet? A: Hackers cannot steal digital assets that are not connected to the internet. Q: So then, how safe are hot wallets? A: The security of hot wallets is dependent upon the security ha...

Avoiding Cryptocurrency Scams

The Money Makers Club now has 6 of 15 available seats. Learn more here! Everyone is always focused on the potential upside of buying cryptocurrency, but they forget there are always going to be hidden downsides as well. The downside risk of investing in cryptocurrencies is huge. Not only do you need to worry about the high volatility of these assets, but you also need to bear in mind that theft is always a possibility, and the assets are poorly regulated.  Lack of Regulation Creates Opportunity for Thieves In the equity and debt markets, there are stringent controls on the way capital is invested and the rules that govern investors. The goal is to protect investors from any fraud or wrongdoing, and even though there are times where it takes regulators longer than normal to catch on (see: Bernie Madoff), the general effect is a safer investment marketplace.  Fraud can occur in a variety of ways. It can be the result of false claims by the company regarding the s...