Experts point out 4 risks when using public WiFi
Ho Chi Minh City aims to cover high-speed free WiFi in 100% of public areas by 2030. This is considered a step forward in digital infrastructure development, but according to cybersecurity experts, people still need to identify potential risks when connecting to public WiFi and proactively protect personal data.
Talking to Lao Dong newspaper, Ms. Nguyen Thi Quynh Anh - Marketing Director of VinCSS Network Security Services Joint Stock Company assessed that free public WiFi is a necessary utility of a smart city. However, users should not underestimate security issues because of "free" or "convenient" factors.
If public WiFi is likened to a desk placed in the middle of a square, then reading newspapers, seeing maps or looking up information is appropriate. However, tasks related to money, passwords or important data of individuals and organizations need to be done in a more reliable environment," Ms. Quynh Anh said.
According to experts, the first risk is connecting to fake WiFi networks. Bad actors can create broadcasting points with names similar to or identical to WiFi of cafes, airports, shopping centers, and even state agencies' networks to steal user information.
Besides, there is the risk of being redirected to fake websites or login gateways, causing users to unintentionally provide accounts, passwords or install malicious applications.
Users can also be attacked from devices connected to the same WiFi network if the security system is weak, especially when the device is running data sharing features or has not updated security patches.
In addition, experts warn of the risk of over-collection of data. Some WiFi systems may record access locations, connection times, device parameters and many user-related data. If data collection and processing are not transparent, the problem is not only limited to technical aspects but also related to privacy and personal data protection.
Ms. Quynh Anh also advised people not to perform banking transactions, online payments, log in to important accounts or enter sensitive information such as citizen identification cards, passports, credit cards when using unverified public WiFi.
What to do to limit risks when connecting to public WiFi?
According to Kaspersky's cybersecurity experts, although risks cannot be completely eliminated, users can still significantly reduce risks if they form safe Internet usage habits.
First of all, users should only connect to official WiFi networks that have been verified. When using WiFi at cafes, airports or public places, you should check the network name with staff or management units, and turn off the automatic connection feature to prevent devices from accessing fake broadcasting points.
In addition, prioritize accessing websites with HTTPS protocols and do not enter personal information if the browser displays security warnings or redirects to unusual websites.
Kaspersky also recommends using virtual private networks (VPN) when forced to work on public WiFi. VPNs help encrypt data transmitted over the Internet, limiting the risk of being tracked or information stolen.
Users should regularly update their operating systems and software to patch security vulnerabilities, and turn off sharing features such as Bluetooth, AirDrop or Quick Share when not in use to reduce the risk of being attacked from other devices in the same network.
For financial transactions, Internet Banking access, e-wallets or processing important documents, experts recommend prioritizing the use of 4G or 5G mobile networks instead of public WiFi.
Signs to help recognize fake WiFi
According to cybersecurity experts, there is no single sign to confirm whether a WiFi network is real or fake, because even the network name can be copied exactly like the official WiFi. However, users should be wary if they detect many networks with the same name at the same time or if similar WiFi names appear but are added with characters such as "-", "5G", "VIP", "Pro" or differ by a few letters. In addition, if the login port requires providing too much sensitive information such as citizen identification, passport, bank card information, password or the browser continuously redirects to strange websites, security warnings appear, users should stop connecting and check again before continuing to use.
