1.5 Wi-Fi and Advanced Persistent Threats

Question 1

Method to crack WPA2 passphrase

Answer 1

• Collect handshake packets when the user joins the network.
• Force user to disconnect with forged de-authentication packets.
• A test to check millions of potential passphrase.
• A methodology to guess passphrases.

Question 2

WPA3

Answer 2

• Improved security for IoT devices
• Supports a much stronger encryption algorithm
• Protection against brute-force dictionary attack (Simultaneous Authentication of Equals)
• Introduces Opportunistic Wireless Encryption (OWEs).

Question 3

Wi-Fi man-in-the-middle attacks

Answer 3

Trick victims into connecting to a wireless network that the attacker controls.

• Evil Twin
• Jasager (pretend to be AP the user normally connects to by responding to beacon request)

Question 4

Advanced Persistent Threats

Answer 4

• Advanced (advanced malware and exploits)
• Persistent (low-and-slow)
• Threat (deliberate and focused)