Nedavno je istraživač sigurnosti otkrio i prijavio nove ranjivosti na WiFi uređajima poznatim kao FragAttacks . To su nove vrste napada koji iskorištavaju nedostatke u dizajnu WiFi standarda i utječu na većinu uređaja s omogućenom WiFi mrežom. ^(WiFi)Prethodno je otkrio KRACK napad koji je u osnovi utjecao na WPA2 protokol.

Što su FragAttacks?

FragAttacks izraz je skovan s izrazom Fr agmentation and Ag gregation Attacks . To su sigurnosne prijetnje koje ciljaju na WiFi uređaje. U tim napadima napadač u osnovi cilja na uređaj koji je u dometu njegove WiFi mreže^{(within the range of its WiFi network)} i krade žrtvine osjetljive podatke (npr. lozinku). Ovi napadi utječu na sve najnovije WiFi sigurnosne protokole uključujući WPA3 i WPA2^{(including WPA3 and WPA2)} . Kućni usmjerivači, IoT , pametni telefoni i mnogi drugi uređaji pogođeni su ovakvim napadima.

Pročitajte^(Read) : Kako osigurati i zaštititi svoj WiFi usmjerivač^{(secure and protect your WiFi Router)} .

Nedostaci u dizajnu WiFi-a

FragAttacks iskorištavaju nekoliko ranjivosti u WiFi -u . Mogu se izvesti na različite načine uključujući:

Napadač može ubaciti nešifrirani WiFi okvir u sigurnu WiFi mrežu. Oni mogu koristiti prvi nedostatak u dizajnu WiFi standarda koji je njegova značajka agregacije . ^{(aggregation)}U ovom slučaju, oznaka " je agregirano^{(is aggregated)} " u okviru nije potvrđena i može se lako mijenjati. Stoga^(Hence) napadač ubrizgava paket i vara žrtvu da je preusmjeri na njihov zlonamjerni poslužitelj.

Druga mana u dizajnu WiFi - a je njegova značajka fragmentacije okvira^{( frame fragmentation)} i poznata je kao napad mješovitim ključem^{(mixed key attack)} . Fragmenti iz istog okvira šifrirani su istim ključem, dok prijemnik može ponovno sastaviti fragmente s različitim ključevima. Napadač to može iskoristiti za eksfiltriranje žrtvinih podataka.

Treći nedostatak dizajna je opet sa značajkom fragmentacije okvira u WiFi -u i naziva se napad predmemorije fragmenata^{(fragment cache attack)} . Ono što se događa je da WiFi uređaj ne eliminira nesastavljene fragmente iz memorije kada je korisnik isključen s mreže. To se može iskoristiti ubrizgavanjem zlonamjernog fragmenta u memoriju pristupne točke. Sada, kada se korisnik spoji na WiFi mrežu i odašilje fragmentirani okvir, ti fragmenti će se ponovno sastaviti s napadačevim ubrizganim zlonamjernim fragmentom.

Pročitajte^(Read) : Kako provjeriti je li vaš usmjerivač hakiran^{(How to check if your Router is hacked)} .

FragAttacks Demo od Mathyja Vanhoefa:

Kako zaštititi svoj WiFi od FragAttacks -a ?

Neke standardne prakse mogu vam pomoći da zaštitite svoj WiFi od FragAttacks . Ovi su:

1. Nadogradite svoj uređaj
2. Instalirajte sigurnosna ažuriranja
3. Koristite šifriranje
4. Koristite VPN
5. Postavite prilagođeni DNS

1] Nadogradite svoj uređaj

Mathy Vanhoef na svom blogu kaže:

The biggest risk in practice is likely the ability to abuse the discovered flaws to attack devices in someone’s home network. For instance, many smart home and internet-of-things devices are rarely updated, and Wi-Fi security is the last line of defense that prevents someone from attacking these devices. Unfortunately, due to the discover vulnerabilities, this last line of defense can now be bypassed. In the demo above, this is illustrated by remotely controlling a smart power plug and by taking over an outdated Windows 7 machine.

Dakle, ako koristite stariju verziju svojih uređaja, morate ih nadograditi. Na primjer, ako još uvijek koristite Windows 7/8 , pravo je vrijeme za nadogradnju na Windows 10^{(upgrade to Windows 10)} kako biste zaštitili svoj uređaj od FragAttacks- a i drugih novih sigurnosnih napada.

A ako koristite stari usmjerivač koji već dugo nema dostupnih nadogradnji, morate razmisliti o promjeni usmjerivača i nabavi novog. Jednostavno zamijenite uređaj ako nema redovitog ažuriranja firmvera.

Pročitajte^(Read) : Kako popraviti ranjivosti javne i kućne Wi-Fi mreže.

2] Instalirajte sigurnosna ažuriranja

Uvijek provjerite jeste li na svom uređaju instalirali sigurnosna ažuriranja. Sigurnosna^(Security) ažuriranja pomažu vam da zaštitite svoje uređaje od novih ranjivosti i sigurnosnih napada. Stoga nastavite provjeravati sigurnosna ažuriranja i instalirajte ih čim budu dostupna. Iako, pametni telefoni i drugi moderni uređaji automatski preuzimaju i instaliraju sigurnosna ažuriranja. Ali provjerite i ručno kako biste osigurali isto.

U slučaju sustava Windows 10 , možete instalirati sigurnosna i druga ažuriranja tako da odete na opciju Settings > Update i Security > Windows Update i provjerite dostupna li ažuriranja, a zatim ih preuzmete i instalirate na svoje računalo.

Pročitajte^(Read) : Savjeti za sigurnost Wi-Fi-ja^{(Wi-Fi Security Tips)} : Mjere opreza na javnim žarišnim točkama^{(Public Hotspots)} .

3] Koristi šifriranje

Kada pretražujete na mreži, provjerite jeste li na sigurnoj web stranici s HTTPS ( Hypertext Transfer Protocol Secure ) certifikatom. Ne samo to, koristite šifriranje cijelo vrijeme i svugdje. Na primjer, koristite sigurnu aplikaciju koja nudi end-to-end enkripciju za prijenos podataka između uređaja. Zapamtite da se FragAttacks^{(Remember FragAttacks)} događaju kada se nekriptirani podaci šalju preko sigurne mreže. Dakle, šifriranje je neophodno.

4] Koristite VPN

Razmislite o korištenju VPN usluge^{(using a VPN service)} jer vam može pružiti zaštitu od FragAttacks -a usmjeravanjem vašeg prometa putem šifrirane veze.

5] Postavite prilagođeni DNS

Također možete ručno konfigurirati prilagođeni DNS na svom usmjerivaču i drugim uređajima kako biste spriječili svaki napad koji vas preusmjerava na zlonamjerni poslužitelj.

FragAttacks je nova zbirka ranjivosti u WiFi standardu koja dovodi u opasnost više uređaja. Napadač unutar dometa vaše mreže može izvesti ove vrste napada u kojima pokušava ukrasti vaše podatke. Međutim, neke osnovne sigurnosne prakse mogu vam pomoći da zaštitite svoj WiFi od FragAttacks-a^{(FragAttacks)} .

Možete se dodatno educirati o FragAttacksu tako što ćete otići na fragattacks.com.

What are FragAttacks? How to secure your WiFi against FragAttacks?

Just about recently, a security researcher has discovered and reported new vulnerabilities іn WiFi devices known as FragAttacks. These are new types of attacks that exploit design flaws in the WiFi standard and affect most WiFi-enabled devices. He has previously discovered the KRACK attack which basically affected WPA2 protocol.

What are FragAttacks?

FragAttacks term is coined with the phrase Fragmentation and Aggregation Attacks. These are security threats that target WiFi devices. In these attacks, the attacker basically targets a device that is within the range of its WiFi network and steals the victim’s sensitive information (e.g., password). These attacks impact all recent WiFi security protocols including WPA3 and WPA2. Home routers, IoT, smartphones, and many other devices are affected by these kinds of attacks.

Read: How to secure and protect your WiFi Router.

Design Flaws in WiFi

FragAttacks take advantage of several vulnerabilities in WiFi. They can be carried out in various ways including:

The attacker may inject an unencrypted WiFi frame into a secure WiFi network. They can use the first design flaw in the WiFi standard which is its aggregation feature. In this, the “is aggregated” flag in a frame is not validated and can easily be modified. Hence, the attacker injects the packet and tricks the victim into redirecting him to their malicious server.

The second design flaw in WiFi is its frame fragmentation feature and is known as a mixed key attack. The fragments from the same frame are encrypted with the same key, while the receiver can reassemble fragments with different keys. An attacker can use this to exfiltrate the victim’s data.

The third design flaw is again with the frame fragmentation feature in WiFi and is called fragment cache attack. What happens is that the WiFi device doesn’t eliminate non-reassembled fragments from memory when a user is disconnected from a network. This can be exploited by injecting a malicious fragment into the access point’s memory. Now, when a user connects to the WiFi network and transmits a fragmented frame, those fragments will be reassembled with the attacker’s injected malicious fragment.

Read: How to check if your Router is hacked.

FragAttacks Demo by Mathy Vanhoef:

How to secure your WiFi against FragAttacks?

Some standard practices can help you protect your WiFi from FragAttacks. These are:

1. Upgrade your device
2. Install Security Updates
3. Use Encryption
4. Use a VPN
5. Set up a Custom DNS

1] Upgrade your device

Mathy Vanhoef says in his blog:

The biggest risk in practice is likely the ability to abuse the discovered flaws to attack devices in someone’s home network. For instance, many smart home and internet-of-things devices are rarely updated, and Wi-Fi security is the last line of defense that prevents someone from attacking these devices. Unfortunately, due to the discover vulnerabilities, this last line of defense can now be bypassed. In the demo above, this is illustrated by remotely controlling a smart power plug and by taking over an outdated Windows 7 machine.

So, if you are using an older version of your devices, you must upgrade them. For example, if you are still using Windows 7/8, it’s the right time to upgrade to Windows 10 to protect your device against FragAttacks and other new security attacks.

And, if you are using an old router that has no upgrades available for a long, you must consider changing your router and getting a new one. Simply replace your device if there are no firmware updates regularly.

Read: How to fix Public and Home Wi-Fi Network vulnerabilities.

2] Install Security Updates

Always make sure that you have installed security updates on your device. Security updates help you protect your devices against any new vulnerability and security attacks. So, keep on checking for security updates and install them as soon as they are available. Although, smartphones and other modern devices automatically download and install security updates. But, also check manually to ensure the same.

In the case of Windows 10, you can install security and other updates by going to the Settings > Update & Security > Windows Update option and check for updates available and then download and install them on your PC.

Read: Wi-Fi Security Tips: Precautions To Take At Public Hotspots.

3] Use Encryption

When browsing online, ensure that you are on a secure website with an HTTPS (Hypertext Transfer Protocol Secure) certificate. Not just that, use encryption all the time and everywhere. For example, use a secure application that offers end-to-end encryption to transfer data between devices. Remember FragAttacks occur when unencrypted data is sent over a secure network. So, encryption is a must.

4] Use a VPN

Consider using a VPN service as it can provide you protection against FragAttacks by routing your traffic through an encrypted connection.

5] Set up a Custom DNS

You can also configure a custom DNS manually in your router and other devices to obstruct any attack that redirects you to a malicious server.

FragAttacks are a new collection of vulnerabilities in WiFi standard that puts multiple devices at risk. An attacker within the range of your network can carry out these types of attacks where he attempts to steal your data. However, some basic security practices can help you protect your WiFi against FragAttacks.

You can further educate yourself on FragAttacks by going to fragattacks.com.

Related posts

• Kako riješiti probleme s WiFi-om u sustavu Windows 11/10

• Je li WiFi siguran za vaše zdravlje i kod kuće?

• Kako postaviti WiFi domet Extender, Booster i Repeater

• Kako izmjeriti snagu WiFi signala u sustavu Windows 10

• Windows se ne povezuje na WiFi pri pokretanju

• Pretvorite Windows PC u WiFi Hotspot putem dijeljenja internetske veze

• Napravite prečac na radnoj površini za prebacivanje na određenu WiFi mrežu u sustavu Windows 10

• Kako provjeriti postavke Wi-Fi mrežnog adaptera u sustavu Windows 11/10

• NetSurveyor: WiFi skener i alat za otkrivanje mreže za PC

• Kako osigurati i zaštititi svoj WiFi usmjerivač

• Saznajte tko koristi vašu WiFi bežičnu mrežnu vezu

• Kako onemogućiti pozadinsko WiFi skeniranje u sustavu Windows 10

• Niska snaga Wi-Fi signala u sustavu Windows 11/10.

• WiFi adapter ne radi na računalu sa sustavom Windows 11/10

• Kako pronaći i spojiti se na skrivene WiFi mreže u sustavu Windows 11/10

• Lozinka za WiFi ne radi na tipkovnici koja nije QWERTY u sustavu Windows 10

• Koristite besplatni akrilni WiFi skener za analizu WiFi mreže u stvarnom vremenu

• Kako preimenovati WiFi mrežni adapter u sustavu Windows 11

• Besplatni softver za otkrivanje i pronalaženje lozinki za WiFi za Windows PC

• Surface uređaj pronalazi dostupnu bežičnu mrežu, ali se ne povezuje