![\"\"](\"https:\/\/www.techsolutionsinc.com\/wp-content\/uploads\/2021\/11\/2017November2Security_A.png\")
You\u2019ve heard of ransomware, denial-of-service attacks, and even phishing, but one hacking technique you may not have heard of is the KRACK exploit. This attack takes advantage of a vulnerability in WiFi networks, which puts any device with a wireless connection at risk. Here\u2019s everything you need to know about KRACK.<\/p>\n
What is KRACK?<\/b>
\nSimply put, KRACK, short for \u2018key reinstallation attack,\u2019 allows hackers to bypass WPA2 — a security protocol used by routers and devices to encrypt activity — and intercepts sensitive data passing between the mobile device and the wireless router, including login details, credit card numbers, private emails, and photos.<\/p>\n
In extreme cases, KRACKed devices can be remotely controlled. For example, hackers can log in to your surveillance systems and shut them down.<\/p>\n
What\u2019s worse, Internet of Things devices — like smart thermostats and IP cameras — rarely receive security fixes, and even if some are available, applying patches are difficult, as these devices tend to have complex user interfaces.<\/p>\n
The good news, however, is you can do several things to mitigate the risks.<\/p>\n
Download patches immediately<\/b>
\nAccording to recent reports, security patches have already been released for major platforms, including iOS, Windows, and Android. Router manufacturers such as Ubiquiti, Mikrotik, Meraki, and FortiNet have also issued firmware updates, so make sure to install them as soon as possible.<\/p>\n
Although IoT patches are rare, consider getting your smart devices from reputable vendors that push out updates regularly. It\u2019s also a good idea to contact a managed services provider to install the updates for you.<\/p>\n
Use Ethernet connections<\/b>
\nSome wireless routers don\u2019t yet have a security patch, so while you\u2019re waiting, use an Ethernet cable and disable your router\u2019s wireless setting. Turn off the WiFi on your devices as well to make sure you\u2019re not connecting to networks susceptible to KRACK.<\/p>\n
Stay off public networks<\/b>
\nFree public WiFi networks — even ones that are password-protected — in your local cafe should also be avoided because they usually don\u2019t have holistic security measures in place, making them easy targets for cybercriminals.<\/p>\n
Connect to HTTPS websites<\/b>
\nIf you do need to connect to a public WiFi hotspot, visit websites that start with \u201cHTTPS,\u201d and stay away from ones that are prefaced with \u201cHTTP.\u201d This is because HTTPS websites encrypt all traffic between your browser and the website, regardless of whether the connection is vulnerable to KRACK<\/p>\n
Hop on a Virtual Private Network (VPN)<\/b>
\nYou can also use a VPN service to hide all network activity. Simply put, VPNs encrypt your internet connection so that all the data you\u2019re transmitting is safe from prying eyes.<\/p>\n
Although the potential impact of a KRACK hack is devastating, security awareness and top-notch support are the best ways to stay safe online. Want more security tips? Contact us today.<\/p>\n