Our home networks may be vulnerable to attack by hackers, thanks to a ‘severe’ security flaw.
Computer security experts are on high alert after it emerged encryption algorithms designed to protect people’s privacy online have been cracked.
That means cyber criminals within physical range of any WPA2 protected wireless router – which includes almost all home users – can spy on your every move online.
It could also provide them easy access to data from smart devices, including baby monitors and internet connected security cameras, experts have said.
What can users do?
Until ISPs and router manufacturers issue firmware update, users may continue to be vulnerable to the exploit.
However, there are some ways people can protect their data.
Traffic between HTTPS servers should remain secure, so it is best to check the URL for any page you are going to input sensitive data into.
Unprotected sites begin with HTTP:// rather than HTTPS://
Anyone with smart devices should visit the manufacturer’s website to check for the latest security updates. Be aware that any data sent in plain text across your home network, for example some email clients use plain text, may be visible.
News of the vulnerability, known as Krack, or Key Reinstallation Attacks, emerged after experts from the Katholieke Universiteit (KU) Leuven, Belgium, announced they would be releasing their findings to the public.
Details of the exploit were published to the researchers’ website shortly before this article was published.
Krack uses a flaw in the Wi-fi Protected Access II protocol (WPA2), developed 13 years ago, which renders it useless.
Depending on the network configuration, it is also possible hackers could inject and manipulate data. For example, an attacker might be able to inject ransomware or other malware into websites.
In a written statement, the researchers said: ‘We discovered serious weaknesses in WPA2, a protocol that secures all modern protected WiFi networks.
‘An attacker within range of a victim can exploit these weaknesses using key reinstallation attacks.
‘Attackers can use this novel attack technique to read information that was previously assumed to be safely encrypted.
‘This can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, and so on.’
