Researchers have discovered a huge flaw in WPA2 Wi-Fi encryption that makes any Wi-Fi enabled device like routers, smartphones and PCs susceptible to this attack. The attacks are being called “KRACK attacks,” which stands for Key Reinstallation Attacks.

Robert Knapp, CEO of CyberGhost, recently sat down with Inside Counsel to discuss the implications of the attacks and how people can encrypt their data to protect themselves.

There is a weakness in the WPA2 protocol, which is the protocol that secures all modern protected Wi-Fi networks. The weakness lies in the “handshake” that a Wi-Fi network and a device give each other when the device asks to join. The two decide on an encryption key for all future traffic, meaning that each device will only be able to read data if it has that key. This weakness allows hackers to access sensitive information that is exposed on the Wi-Fi connection such as credit card details, addresses, chats etc. An attacker within range of anybody using a Wi-Fi connection victim can exploit these to obtain an incredible amount of information on all of us.

As the weakness is in the Wi-Fi connection to the device this means that all devices that are connected to the network and connect to the internet without a VPN are exposed. But the most exposed devices are Android phones not only are they already particularly vulnerable, they are also incredibly slow to receive updates—meaning that the patch could take a while to arrive, which is especially concerning now that the exploit is public.

“The vulnerability can be used to steal any information which is used while browsing including bank accounts, credit cards, chat messages, emails, photos and so on,” Knapp explained. “It can also be used to inject and manipulate data; attackers can use this to infect websites and insert ransomware. We do not know which information has been already used and the worry now, is how this vulnerability, which is not exposed to the public, will be used in the future.”

So, how can people protect themselves from these attacks?

One way to protect yourself is not to use any sensitive information while connecting to Wi-Fi, according to Knapp, but this is difficult as vulnerability exists on almost any Wi-Fi connection. Using a top-class 256-bit AES encryption technology, such as the one provided in CyberGhost VPN protects your privacy and secures you online, even on a public, unprotected Wi-Fi. Furthermore, CyberGhost adds an additional layer like HTTPS that secures even non- HTTPS connections in a hacked Wi-Fi.  Also, major hardware manufacturers are releasing patches to deal with this weakness that can be downloaded and used to protect consumers.

“This weakness is especially exposing as it applies to most Wi-Fi connections including home Wi-Fi devices, which means that any information used when browsing the internet is exposed,” he explained. “And given that we use our mobile and desktop devices for everything these days it is basically like walking around in the middle of the street shouting out loads of your credit card information, address and personal chats for everybody to hear.”

Today, this is one of the widest-spread vulnerabilities as it exists in almost any interaction we have with the internet in our daily lives. This reiterates what CyberGhost has been saying for a while, “The Internet itself is broken and until the whole system is replaced we all have to make sure we take precautions to protect ourselves when using it.”

Researchers have discovered a huge flaw in WPA2 Wi-Fi encryption that makes any Wi-Fi enabled device like routers, smartphones and PCs susceptible to this attack. The attacks are being called “KRACK attacks,” which stands for Key Reinstallation Attacks.

Robert Knapp, CEO of CyberGhost, recently sat down with Inside Counsel to discuss the implications of the attacks and how people can encrypt their data to protect themselves.

There is a weakness in the WPA2 protocol, which is the protocol that secures all modern protected Wi-Fi networks. The weakness lies in the “handshake” that a Wi-Fi network and a device give each other when the device asks to join. The two decide on an encryption key for all future traffic, meaning that each device will only be able to read data if it has that key. This weakness allows hackers to access sensitive information that is exposed on the Wi-Fi connection such as credit card details, addresses, chats etc. An attacker within range of anybody using a Wi-Fi connection victim can exploit these to obtain an incredible amount of information on all of us.

As the weakness is in the Wi-Fi connection to the device this means that all devices that are connected to the network and connect to the internet without a VPN are exposed. But the most exposed devices are Android phones not only are they already particularly vulnerable, they are also incredibly slow to receive updates—meaning that the patch could take a while to arrive, which is especially concerning now that the exploit is public.

“The vulnerability can be used to steal any information which is used while browsing including bank accounts, credit cards, chat messages, emails, photos and so on,” Knapp explained. “It can also be used to inject and manipulate data; attackers can use this to infect websites and insert ransomware. We do not know which information has been already used and the worry now, is how this vulnerability, which is not exposed to the public, will be used in the future.”

So, how can people protect themselves from these attacks?

One way to protect yourself is not to use any sensitive information while connecting to Wi-Fi, according to Knapp, but this is difficult as vulnerability exists on almost any Wi-Fi connection. Using a top-class 256-bit AES encryption technology, such as the one provided in CyberGhost VPN protects your privacy and secures you online, even on a public, unprotected Wi-Fi. Furthermore, CyberGhost adds an additional layer like HTTPS that secures even non- HTTPS connections in a hacked Wi-Fi.  Also, major hardware manufacturers are releasing patches to deal with this weakness that can be downloaded and used to protect consumers.

“This weakness is especially exposing as it applies to most Wi-Fi connections including home Wi-Fi devices, which means that any information used when browsing the internet is exposed,” he explained. “And given that we use our mobile and desktop devices for everything these days it is basically like walking around in the middle of the street shouting out loads of your credit card information, address and personal chats for everybody to hear.”

Today, this is one of the widest-spread vulnerabilities as it exists in almost any interaction we have with the internet in our daily lives. This reiterates what CyberGhost has been saying for a while, “The Internet itself is broken and until the whole system is replaced we all have to make sure we take precautions to protect ourselves when using it.”