Hacking Public Wi-Fi DNS to Steal Credentials

Hacking Public Wi-Fi DNS to Steal Credentials

Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around the world and changing their DNS settings. The goal is to redirect users to fake login pages and steal their credentials.

Tags: credentials, DNS, hacking, phishing, theft

Posted on August 17, 2026 at 7:18 AM • 1 Comments

Carl Fink • August 17, 2026 8:10 AM

Would that be compatible with https? Would the fake login page not have the wrong cert, if it even had SSL enabled? Or is the user meant not to notice a redirect from att.net to att.someotherdomain.net or something?

Leave a comment

Name

Email

URL:

Remember personal info?

Fill in the blank: the name of this blog is Schneier on ___________ (required):

Allowed HTML <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre> Markdown Extra syntax via https://michelf.ca/projects/php-markdown/extra/

Notify me of new posts by email.

← Friday Squid Blogging: Searching for the Colossal Squid