CNN) — A recent warning from the FBI about hackers targeting guests’ data when they log into hotel Wi-Fi overseas was a salient reminder to travelers of the risks to data security on the road.
The alert, from the FBI’s Internet Crime Complaint Center, was addressed to U.S. executives, government workers and academics but did not specify a particular country of threat. It warned of a spate of incidents of travelers encountering bogus software update pop-ups when they used hotel internet connections overseas. When they clicked on the “update,” malicious software was installed on their computer.
Hotel Wi-Fi connections are particularly risky, said Sian John, UK security strategist at Symantec, because they are often set up without proper security settings. But they are merely one data-security threat among many facing business travelers.
From a data-security standpoint, travel is inherently risky, and the likelihood of private personal or corporate data being compromised is greatly increased the moment you hit the road, she said.
“One of the major ways data loss happens is when people are traveling,” she said. “You’re not in a secure area … That is where the risks tend to arise.”
John said a major risk was that in getting online while on the road, travelers often turn to free Wi-Fi internet connections — in hotels, but also at airports, conference centers and business facilities.
While security settings vary from network to network, many are left open and unmonitored, and travelers are frequently unaware that they could be unwittingly exposing themselves to data loss by logging on.
“Anyone can connect to them, which means anyone can look at the traffic going across them,” she said. “It’s very easy to sit on one of these things and pick up the traffic going through them. There are devices out there that let you hijack them.”
Gary Davis, McAfee’s director of global consumer marketing, said there was a growing trend of hackers setting up mock Wi-Fi hotspots in public places, which appear at the top of the list of available Wi-Fi connections.
“People will see ‘free Wi-Fi’ and click on it, and when they do that they open themselves up to great exposure,” he said. The best approach is to be wary and steer clear of Wi-Fi hotspots that do not seem legitimate — “something (that) looks like it’s not quite right, not the proper name they might expect,” he added.
Once compromised, hackers can take total control of a device, including removing all the data contained on it. Android devices are currently the devices most targeted by hackers, Davis said.
“We saw a 1,200% increase in malware targeting Android devices just in the first quarter of this year,” he said.
John said the best approach for business travelers when using public Wi-Fi is to remotely log into their employer’s virtual private network, or VPN, which ensures all data received and sent from a device is encrypted
Travelers can also better protect themselves by using encrypted protocols — simply typing “https:” instead of “http:” at the beginning of URLs — although “https:” is not supported by all websites. And they should avoid transmitting sensitive information, such as work documents or credit card details, over public Wi-Fi spots. “I would be cautious of doing anything sensitive on them,” John said.
But the risk of data loss begins even before logging on, she said. “People forget about the over-your-shoulder problem when traveling,” she said. Travelers engrossed in their work in cafes, departure lounges or on transport are often unaware of prying eyes around them.
“Most people don’t have a privacy screen on their laptop still, so anyone sitting next to you can look over your shoulder and see what you’re doing.” for complete Article