Picture this. You’re at a business event in Melbourne, taking your brunch in a café between sessions. You connect to what looks like the venue’s free Wi-Fi with the display name “Event_Guest” and start checking emails. The problem is that the network isn’t real. It’s a fake, set up by someone metres away with a laptop and the right software. And now, they’re watching everything you do.
That’s an evil twin attack, and it’s not just a rare occurrence; it’s a growing threat that demands our immediate attention.
What Is an Evil Twin Attack?
Think of it as a sneaky digital doppelgänger. An attacker creates a fake Wi-Fi network that looks identical to the real one, with the same name and often a stronger signal and waits for people to connect. Once you use the Wi-Fi, all your internet traffic flows through their system. From there, they can intercept unencrypted data, steal login credentials, or infect your device with malware.
The term evil twin fits: it’s a mirror image of a trusted network with a different agenda.
Why It’s a Growing Threat in Australia
With the rise of remote work, business travel, and public Wi-Fi, Australian businesses are more exposed than ever. And the worst part? These attacks are tough to detect. The fake networks look completely legit, and your devices won’t know the difference.
If one of your team members logs into corporate systems over one of these rogue networks, attackers can capture everything, including email logins, internal platforms, and even VPN credentials, if the setup isn’t airtight.
Under Australian privacy law, a breach of this nature can lead to significant fines, mandatory notifications, and severe reputational damage. This is particularly true for sectors like finance, health, and government.
In June 2024, the AFP charged a man who allegedly established fake free Wi-Fi and faced nine charges for alleged cybercrime offences. He used a portable wireless access device to create an evil twin free Wi-Fi network to steal personal data from the victims.
Read here on how evil twin attack can happen in real life situation: Evil Twin Attacks in the Wild.
Don’t VPNs Protect You?
Short answer: yes, mostly. But it’s not foolproof.
What VPNs do well:
- Encrypt your internet traffic so attackers can’t read what you’re sending
- Protect login credentials and DNS requests
- Add a strong layer of privacy, especially on public networks
Where they fall short:
- There’s a small window before your VPN connects where data might leak
- Poorly configured VPNs can accidentally expose traffic
- Some allow “split tunnelling”, where certain apps bypass the VPN entirely
- They won’t stop malware if your device gets infected before the VPN kicks in
While VPNs are a valuable tool in your cybersecurity, it’s crucial to remember that they’re not a one-size-fits-all solution. Caution and vigilance are still key.
So, How Do You Stay Safe?
It’s all about layering up your defences. Here’s what Aussie businesses should be doing:
At the organisational level:
- Use always-on VPNs on all company devices
- Set strict policies around public Wi-Fi use
- Deploy mobile device management (MDM) tools to stop risky connections
- Train staff regularly, especially those who travel for work
- Offer mobile hotspots or data dongles for execs and remote staff
Individually, train staff to:
- Always verify public Wi-Fi names with staff before connecting
- Avoid auto-connect settings on devices
- Use mobile data when accessing sensitive systems
- Pay attention to browser warnings, SSL errors, and dodgy network names
Evil twin attacks are sneaky, fast, and surprisingly common but not unstoppable. Aussie businesses can outsmart them with the right mix of tech, training, and caution.
