Key Reinstallation Attacks (KRACK) hacks use a vulnerability in WPA2 WiFi encryption to spy on your Internet traffic when connected to WiFi networks. Since most modern WiFi networks use WPA2 encryption the vulnerability spans millions of devices around the world. The problem spans from routers to phones and a wide range of iOT devices. Whether you are connecting to WiFi from your favorite hangout using your iPhone or connecting to a hotel network on your laptop, the KRACK hack puts everyone at risk.
The news of the KRACK vulnerability broke a few hours ago. You can expect fixes to be released in the days and weeks to come. The problem is a big one since the researchers that discovered KRACK, Mathy Vanhoef of imec-DistriNet, and KU Leuven, found that the security flaw let’s hackers attack all modern WPA2 protected WiFi networks. This means that any device that supports WiFi is very likely impacted by the issue.
The KRACK researchers found that Android, Apple, Windows, Linux, and other platforms are all affected by the attacks. This means that you should be very careful when connected to WiFi networks. In time vendors like Linksys and other router manufacturers will release patches. The attacks go much deeper though since millions (perhaps even billions) of iOT devices are also vulnerable to the attacks. What can you do to protect yourself from the attacks? For now the best answer is to use a VPN like IPVanish.
It helps to understand KRACK a little better to protect yourself. For starters you should assume that all WiFi networks are vulnerable at the moment. The attack requires the hacker to be nearby to intercept your data. The first step to protect yourself is to make sure and install updates on all your devices as soon as they become available. As always, you will want to make sure that any website you log in to or share information on uses SSL encryption. Look for HTTPS in the site address or a lock symbol on most web browsers. The final and best step to protect your privacy is to use a VPN. This will encrypt all of your data as it passes over vulnerable WiFi networks. This is the best solution to protect your privacy until the patches are released.
