AirDefense Warns Corporate Executives of New Phishing Scam Targeting Wireless Networks; Company Offers Tips on How Executives Can Avoid Becoming Wi-Fi Phishing Bait

ATLANTA--(BUSINESS WIRE)--May 9, 2005--AirDefense, the leader in anywhere, anytime wireless monitoring today issued a warning to business executives that are accessing their corporate networks via laptop computers and other wireless devices. A new malicious phishing attack, this time targeting Wi-Fi users, was discovered at a recent WLAN event in Olympia, U.K. and then manifested again last week at Interop.

The latest attack works when a hacker creates a fraudulent Web site that has the look and feel of a log-in page to a Wi-Fi network, when in reality the site is bogus. When a user logs into the fraudulent network, as many as 45 viruses are sent to computers that accessed it. AirDefense does not believe that everyday users of public hotspots should be fearful, but executives using Wi-Fi in airport lounges and on any business trip should take preventative steps against the newest scam.

This newest Wi-Fi phishing attack is a more sophisticated version of an "Evil Twin" attack that propagated over the Internet in January. "Evil Twin," also known as AP phishing, is a technique whereby an attacker tricks victims into connecting to a laptop or PDA by posing as a legitimate hotspot. Once the victim has connected to the illegitimate hotspot, the attacker coerces the user into revealing personal and confidential information that can be used for the purposes of identity theft or other illegal activities.

AirDefense lists the Top 5 ways business executives can avoid becoming Wi-Fi phishing bait.

1. Install personal firewall and security patches.

2. Enter passwords only into Web sites that include an SSL key at bottom right.

3. Avoid hotspots where it is difficult to tell who is connected, such as at hotels and airport clubs. Use hotspots for Web surfing only.

4. Turn off or remove your wireless card if you are not using the hotspot.

5. Do not use insecure applications such as e-mail or instant messaging while at hotspots.

AirDefense has made a FREE version of AirDefense Personal software available to business travelers for their laptops. Once loaded, AirDefense Personal will monitor for a variety of wireless risks, including Wi-Fi phishing and "Evil Twin" attacks. People using wireless can download AirDefense Personal at http://www.airdefense.net/products/adpersonal/.

About AirDefense, Inc.

AirDefense is the market leader in anywhere, anytime wireless security and monitoring. The company's products provide the most advanced solutions for rogue wireless detection, policy enforcement and intrusion prevention both inside and outside an organization's four walls. AirDefense's enterprise-class products scale to support everything from single offices to organizations with hundreds of locations. Founded in 2001, AirDefense is based in Alpharetta, GA and services hundreds of government agencies and blue chip corporations. For more information, please visit http://www.airdefense.net or call 770.663.8115.