billyblaxsta Posted June 5, 2011 Share Posted June 5, 2011 (edited) This is a bit weird. I was looking at my log in Karma on the Fon and saw the network name: hacked_wifi_pls_use_secure_psw The MAC address OUI indicated RIM (Blackberry). I assume that is the name of the network the client was looking for but it does seem a bit strange. Could it mean something else? Thanks. Edited June 5, 2011 by billyblaxsta Quote Link to comment Share on other sites More sharing options...
digininja Posted June 5, 2011 Share Posted June 5, 2011 It is probably someone who knows about Karma style attacks and has put that as their most preferred network so that they know if they connect to it then they are being attacked. Quote Link to comment Share on other sites More sharing options...
JohnE Posted June 5, 2011 Share Posted June 5, 2011 or just someone who has associated with an already hacked ssid (open ssid with default username and password on the ap/router, and a greyhat changed the ssid, and the client you see has associated with that ssid.) Quote Link to comment Share on other sites More sharing options...
billyblaxsta Posted June 5, 2011 Author Share Posted June 5, 2011 It is probably someone who knows about Karma style attacks and has put that as their most preferred network so that they know if they connect to it then they are being attacked. Have you seen anything like this before then? Especially from a RIM - I wouldn't have thought most people would use the wifi for internet when it has EDGE. So to clarify your point: if what you are saying is correct then the person always selects his network rather than automatically connecting so if an automatic connection takes place it will be the preferred network hence they know there is a problem. Yes? Quote Link to comment Share on other sites More sharing options...
digininja Posted June 5, 2011 Share Posted June 5, 2011 If I'm right then they will have wifi enabled and have auto connect enabled but they should never connect to that SSID, if they do then they know that they've connected to a Karma AP so should disconnect. Quote Link to comment Share on other sites More sharing options...
billyblaxsta Posted June 9, 2011 Author Share Posted June 9, 2011 If I'm right then they will have wifi enabled and have auto connect enabled but they should never connect to that SSID, if they do then they know that they've connected to a Karma AP so should disconnect. The same client connected today. However, after a few minutes, the SSID they were trying to connect to changed to NETGEAR. Quote Link to comment Share on other sites More sharing options...
digininja Posted June 15, 2011 Share Posted June 15, 2011 It will be cycling through its preferred network list (PNL) Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.