Dark Mode

Settings

Capec-613 Detail

WiFi SSID Tracking

Detailed Communications Software Typical Severity: Low

Parents: 292

Threats: T60 T65 T80 T288 T291 T334 T392 T407

Description

In this attack scenario, the attacker passively listens for WiFi management frame messages containing the Service Set Identifier (SSID) for the WiFi network. These messages are frequently transmitted by WiFi access points (e.g., the retransmission device) as well as by clients that are accessing the network (e.g., the handset/mobile device). Once the attacker is able to associate an SSID with a particular user or set of users (for example, when attending a public event), the attacker can then scan for this SSID to track that user in the future.

Not present

Not present

  1. None

Not present

Low
Open source and commercial software tools are available and open databases of known WiFi SSID addresses are available online.

Not present

Not present