KARMA attack

For the spyware tool used against rivals of the government of the United Arab Emirates, see DarkMatter_(Emirati_company) § Karma_spyware.

In information security, a KARMA attack is an attack that exploits a behaviour of some Wi-Fi devices, combined with the lack of access point authentication in numerous WiFi protocols. It is a variant of the evil twin attack.[1] Details of the attack were first published in 2004 by Dino dai Zovi and Shane Macaulay.[2]

Vulnerable client devices broadcast a "preferred network list" (PNL), which contains the SSIDs of access points to which they have previously connected and are willing to automatically reconnect without user intervention.[3][1] These broadcasts are not encrypted and hence may be received by any WiFi access point in range.[4][5] The KARMA attack consists in an access point receiving this list and then giving itself an SSID from the PNL,[3][6] thus becoming an evil twin of an access point already trusted by the client.[1]

Once that has been done, if the client receives the malicious access point's signal more strongly than that of the genuine access point (for example, if the genuine access point is nowhere nearby), and if the client does not attempt to authenticate the access point, then the attack should succeed. If the attack succeeds, then the malicious access point becomes a man in the middle (MITM), which positions it to deploy other attacks against the victim device.[4]

What distinguishes KARMA from a plain evil twin attack is the use of the PNL, which allows the attacker to know, rather than simply to guess, which SSIDs (if any) the client will automatically attempt to connect to.[1]

See also

References

  1. ^ a b c d Instant KARMA Might Still Get You (10 August 2015). "Instant KARMA Might Still Get You". Insights.sei.cmu.edu. Retrieved 2019-03-03.
  2. ^ "SensePost - Improvements in rogue ap attacks – mana 1/2". sensepost.com. Retrieved 3 March 2019.
  3. ^ a b Wright, Joshua (5 March 2007). "Issues with SSID cloaking". Network World.
  4. ^ a b "The WiFi Pineapple - Using Karma and DNSspoof to snag unsuspecting victims". Archived from the original on 2019-03-06. Retrieved 2019-03-03.
  5. ^ "SANS security". Professionalsecurity.co.uk. Retrieved 3 March 2019.
  6. ^ Ethical Hacking and Countermeasures: Web Applications and Data Servers. Cengage Learning. 24 September 2009. ISBN 978-1435483620 – via Google Books.
Stub icon

This computer security article is a stub. You can help Wikipedia by adding missing information.

Content Disclaimer

Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.

  1. The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
  2. There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
  3. It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
  4. Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
  5. Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.