An employee working remotely at a coffee shop connects a mobile device to an open public Wi-Fi network. Shortly after connecting, the user notices repeated SSL/TLS certificate warnings when navigating to secure corporate websites, accompanied by unexpected prompts to re-enter login credentials. Which of the following is the MOST likely cause of this security issue?
- The mobile device is connected to a rogue access point performing a man-in-the-middle attack.Cevap
- BThe mobile carrier is experiencing a regional network outage that redirects cellular data to unencrypted towers.
- CThe open public network is enforcing WPA2-Enterprise encryption standards on web browser traffic.
- DThe operating system automatically restricted application permissions to prevent background data usage.
Cevap
The mobile device is connected to a rogue access point performing a man-in-the-middle attack.
When a mobile device connects to an untrusted rogue access point configured as a man-in-the-middle proxy, the malicious gateway attempts to decrypt HTTPS traffic using its own certificate. Because the client browser does not trust the proxy's certificate, it generates SSL/TLS certificate warnings. The attacker may also inject fake login pages to harvest user credentials.
Adım Adım Çözüm
Anahtar Kavram
Rogue Access Points and Man-in-the-Middle (MitM) Attacks