Australian Man Sentenced Over Seven years for “Evil Twin” WiFi Hacking Scheme
A 44-year-old Australian national has been sentenced to seven years and four months in prison for orchestrating a sophisticated “evil twin” WiFi network used to steal sensitive data from travelers at airports and on domestic flights across Australia. The scheme involved creating a rogue wireless network mimicking legitimate airport WiFi, ultimately leading to the theft of personal credentials and intimate images.
The man was charged in July 2024 following an examination that began in April of the same year,when Australian authorities seized his equipment. Investigators confirmed he was actively engaged in malicious activities at airports in Perth, Melbourne, and adelaide, and also during flights.
The perpetrator utilized a ‘WiFi Pineapple’ portable wireless access device to establish the fraudulent network, carefully replicating the SSID (network name) of legitimate WiFi hotspots. Unsuspecting users connecting to this malicious access point were then redirected to a phishing webpage designed to capture their social media login details.
According to the Australian Federal Police (AFP), the stolen credentials were then exploited to gain unauthorized access to women’s accounts, enabling the perpetrator to monitor their communications and pilfer private photos and videos. “Forensic analysis of data and the seized devices identified thousands of intimate images and videos,personal credentials belonging to other people,and records of fraudulent wifi pages,” a senior official stated.
The extent of the man’s attempts to cover his tracks was also revealed.The day after a search warrant was executed, he deleted 1,752 items from a data storage application and attempted, unsuccessfully, to remotely wipe his mobile phone. Further investigation revealed that, after his luggage was seized on April 19, 2024, he illicitly accessed his employer’s laptop to obtain data regarding confidential meetings between his employer and AFP investigators.
The man ultimately pleaded guilty to a comprehensive list of charges, including:
- Five counts of causing unauthorized access or modification of restricted data
- Three counts of attempting to cause unauthorized access or modification of restricted data
- One count of stealing
- Two counts of unauthorized impairment of electronic communication
- One count of possessing or controlling data with the intent to commit a serious offense
- one count of failure to comply with an order under section 3LA(2)
- Two counts of attempted destruction of evidence
AFP Commander Renee colley issued a stark warning to the public regarding the inherent risks associated with using free WiFi networks. She strongly advised individuals to utilize virtual private networks (VPNs), employ robust passwords, and disable both file-sharing and automatic WiFi connectivity.
While “evil twin” WiFi attacks are not widespread, authorities emphasize their practical feasibility and the potential for significant harm.
Here’s a breakdown answering the “Why,Who,What,and How” questions,integrated into a news report style:
Why: The scheme aimed to steal sensitive personal data,including login credentials and intimate images,from unsuspecting travelers. The perpetrator exploited vulnerabilities in public WiFi networks to gain unauthorized access to victims’ accounts.
Who: A 44-year-old Australian national was responsible for the scheme. He was sentenced to seven years and four months in prison. The victims were primarily women whose social media accounts were compromised. australian Federal Police (
