All internet users are vulnerable to attacks from hackers who steal personal information and identities. One of the most common ways that hackers steal your information is called a man-in-the-middle (MITM) attack. This guide will answer the following questions:
- What is a man-in-the-middle attack?
- What are the dangers of a man-in-the-middle attack?
- How do I detect a man-in-the-middle attack?
- How can I prevent a man-in-the-middle attack?
Shopping at your favorite online boutique and laughing at the latest trends on your social media feed is all fun and games until someone hacks your information. One of the most common cybersecurity risks is a MITM attack, and the worst part is they can occur in every corner of the internet. With these seven steps, you can outsmart hackers and keep your information safe and secure.
What Are Man-in-the-Middle Attacks?
At its core, a MITM attack is simply a digital version of eavesdropping. To pull this off, the bad guys have to insert themselves in between two devices that are communicating over the internet.
For example, imagine that you’re logging into your bank account online. You and your device are communicating with your bank’s servers over the internet, and very sensitive information is being communicated. A hacker could add an extra step in the middle of your communication, reading everything that goes back and forth.
How can a hacker do this? There are a few ways, but the most common is to use a router. That could be your router, if the hackers find a way to compromise it. More commonly, it would be the hacker’s own router. Hackers could set up their router to “spoof” (or imitate) a more trusted network, or they could simply set up their router in a public place, name the network “free Wi-Fi,” and hope that unsuspecting victims trust it. These aren’t the only ways to pull off a MITM attack, but they’re the ones you’re most likely to come across as a private citizen.
|
Hacking History: One of the most publicized MITM attacks occurred in 2017 with Equifax, a credit score company. Equifax was the victim of a data breach. Researchers discovered that the app did not consistently use HTTPS, meaning attackers could intercept personal data from users to access their accounts. |
How to Protect Yourself From a Man-in-the-Middle Attack
Avoid Open Public Wi-Fi Hotspots
There are two significant risks when using public Wi-Fi: You don’t know who it belongs to, and you don’t know who else is using it.
Let’s start with the question of who a network belongs to. Lots of reputable establishments offer free Wi-Fi, but you need to be aware that some bad actors can create their own Wi-Fi networks. Make sure that the Wi-Fi you’re using is the real network run by the airport, coffee shop, or other establishment you’re at, and never use a sketchy-looking network or someone else’s personal “hotspot.”
Even if you’re sure a network is legit, be careful with what you communicate over an unsecured network. Using a public Wi-Fi hotspot that isn’t password protected is one of the easiest ways hackers can launch a MITM attack.
If you’re at a coffee shop and need Wi-Fi access, check with an employee to ensure you’re using the correct network. Be vigilant in your online activity while using it, and avoid logging in to any website with personal information, such as your bank account, or communicating any personal or sensitive information.
Another common way to put yourself at risk is by using Wi-Fi on your cell phone while in public. The same risks apply, but there are options on your phone that allow you to log in to public Wi-Fi networks automatically. Turn off this setting, because you could unknowingly log in to an unsecured Wi-Fi network that leaves you susceptible to a MITM attack.
Enable Two-Factor Authentication
Two-factor authentication (2FA) is a security process where users provide two different authentication factors to verify themselves, enhancing protection against unauthorized access to an account. In layperson’s terms, this often means that you enter a code that is texted to your cell phone in addition to entering your password. Your password alone isn’t enough to access your account — you need that second factor.
Two-factor authentication may feel like a bit of a chore, but it is crucial. Think of two-factor or multifactor authentication as login-credential insurance. When you set up two-factor authentication on your accounts, you can stay protected even if your login credentials become compromised.
If a MITM attack intercepts your password but you have two-factor authentication set up, then you have much less of a problem than you would if the password granted hackers instant and unfettered access to your account.
Not all websites and apps provide two-factor authentication, but major companies, such as banks and e-commerce websites, typically offer it. Two-factor authentication works by requiring an extra step in the login process, in which you sign in on a different device or from a different location. Usually, a personal identification number is required, or you have to authenticate the login via email or your phone.
Strengthen Your Login Credentials and Change Your Passwords Frequently
Another, simpler way to account for the fact that a MITM attack could intercept your password is to practice better password security.
It’s tempting to use the same login credentials for every website because, well, there are tons of them, but it puts you at risk. If a hacker obtains login credentials for your Instagram account and finds it’s the same as your banking login, that gives them access to sensitive information from multiple sources.
It’s also tempting to use the same passwords for years on end. But, again, this doesn’t protect you well in the event that a hacker steals your password. You can never be sure if a hacker will steal your password, but you can at least make sure that whatever credentials the hacker gets have an expiration date.
Secure Your Wireless Router
Public Wi-Fi routers are most vulnerable to MITM attacks because they are typically the least secure. But that’s not a given — it’s up to you to make sure that your home Wi-Fi network is better protected than a public network.
When you set up the internet in your home, your router comes with default credentials that are easy for hackers to guess. If hackers can get into your Wi-Fi network, they can infect it with malware or perform a MITM attack to see and intercept everything you do on your home Wi-Fi network. Keep your wireless router secure by updating your login details immediately after installation. Change your password occasionally after that, too, just in case.
Use a Virtual Private Network
If you frequently use public Wi-Fi or have been a victim of a cyberattack in the past, a virtual private network (VPN) can be your security BFF. Think of a VPN as your own private tunnel that allows you to send and receive data online securely so you can avoid being tracked by hackers.
VPNs keep you secure by encrypting any information you use to access your online accounts. Once encrypted, the information cannot be searched or read by outside parties (e.g., hackers) until it reaches its intended destination, such as your email account. Then the information is decrypted for authorized use by the intended recipient.
You can find VPN providers online, and you have the option of choosing a paid or free service. Ensure you do thorough research on any VPN you choose to stay vigilant in keeping your information secure. Here are a few trustworthy VPN providers:
- NordVPN
- Surfshark
- Private Internet Access
- Hotspot Shield
- ExpressVPN
Stay Alert for Unsecure HTTP Websites
Routers are the most common factor in MITM attacks, but there are other ways hackers pull off these scams.
Remember how Equifax became a victim of a data breach? The reason behind that breach was due to an unsecured HTTP website. Whenever you visit a website, you’ll notice the web address starts with either HTTP or HTTPS. HTTP stands for hypertext transfer protocol, while HTTPS stands for hypertext transfer protocol secure.
The letters at the beginning of the web address are called a protocol. Protocols communicate between your web browser and the back end of the internet. When you type in the website you want to visit, the protocol tells the web where you want to go and asks the web to send you there.
The difference between HTTP and HTTPS is that HTTPS is secure, while HTTP is not. Websites using HTTP are much easier to hack and could be used in a phishing attack attempt to gain your personal information. Web browsers such as Google Chrome make it easy to spot the difference by including a lock image to the left of the URL that indicates you can trust the protocol.
When browsing the internet, stay alert for any websites using HTTP, and be wary of the information you provide those sites.
Watch Out for Warning Signs Across the Web
In addition to checking unsecured sites for HTTPS, there are other red flags to look out for as you browse online. Some of these are less common in MITM attacks but are very common in other forms of online hacks and scams.
- Fake websites: Watching out for HTTP can help, but it’s important to recognize any other suspicious indicators of a fake website, such as misspelled words. A common MITM attack on fake websites occurs when you are attempting to download free software, but it ends up being malware.
- Suspicious certificates: Legitimate websites receive a certificate that verifies the website owner’s identity. Browsers will automatically check for this certificate, and you will get a warning if the certificate is missing, invalid, or expired. If you get this warning, it’s possible you’re on the verge of a MITM attack. Always avoid websites that provide this warning, even if you think it’s a legitimate website that overlooked their certificate renewal.
- Pop-up messages: Pop-up messages commonly found online feature advertisements, but sometimes it’s an attempted MITM attack. A sign of these MITM attacks is a pop-up claiming you have a virus or need to update a program that will then ask you to download something to fix it. The download is usually malware. These pop-ups can occur on legitimate websites, too, so be wary if you see one on your screen.
Educate Yourself on Cybersecurity Trends
New cybersecurity trends arise every day. Hackers work hard to do whatever they can to access your personal information. The best way to fight them is to educate yourself to stay keenly aware of anything suspicious online. To stay informed about common cybersecurity risks, you can visit the National Institute of Standards and Technology cybersecurity hub for the latest news and information. If you can stay ahead of what hackers are doing, you can remain vigilant in protecting your information.