Definition
An evil twin is a fraudulent Wi-Fi access point that impersonates a legitimate network to trick users into connecting. It operates by broadcasting a network name that closely resembles a trusted Wi-Fi hotspot, such as one found in a coffee shop or airport. Once a user connects to the evil twin, all their internet traffic is routed through the attacker's device, allowing them to intercept sensitive information like login credentials and financial data. This threat is particularly concerning for mobile users who frequently connect to public Wi-Fi. For instance, an attacker might set up an evil twin at a conference venue, posing as the official event Wi-Fi. It is crucial to distinguish an evil twin from a rogue access point, which is an unauthorized but legitimate access point within an organization's network. Understanding evil twins is essential for cybersecurity professionals and is a common topic on exams like CompTIA Security+ and CISSP.