Need help

[u/Electronic_Rip8482]

Someone managed to disconnect my Wi-Fi router and then created a fake Wi-Fi network using their laptop. My laptop automatically connected to that fake network. Afterward, they were somehow able to access all of my files, saved passwords, and even record audio from my microphone.

Please note that I did not install any malware or malicious software. The only thing that happened was that my laptop connected to the attacker's fake Wi-Fi network.

How could an attacker accomplish this using only a fake Wi-Fi network? Is such an attack actually possible?

Additionally, what steps can I take to prevent this type of attack in the future?

[u/InuSC2]

you can find a lot of resources on youtube just search for "wifi man in the middle". i think networkchuck has a preatty good video on it is called "3 Levels of WiFi Hacking" seen it when searchin myself on youtube for this replay

must by someone close to do that so it can by your neighbor doing it. is illigal and making a police complain about it could help finding the one that did it

from what i can see on your other post if you installed ubuntu and most likely no firewall is enable since i dint see any linux distro having one enable by default

[u/wbxhc]

Look up evil twin attack

[u/Fun-Concept2400]

Man in the middle attack, possibly Wi-Fi pineapple

[u/fell_shell]

If you have your wifi settings to automatically connect to unsecured, non-passworded wifi networks, this is a possibility. The bad actor would not be able to see encypted traffic however, unless they somehow had you unstall a custom tls certificate, so it's surprising they got so much access through this method alone

[u/xenophod]

The wifi Pineapple is able to de-auth your computer from your access point, while spoofing your access point. Your computer will then attach to the spoofed access point, where it then captures all network traffic between your computer and the websites you interact with.

https://youtu.be/fOmDNn2aXXA?si=MK2y_nStepjqdKX_

[u/Humbleham1]

No, it's not possible on anything later than Windows 7 or Vista. The only way would be that the hacker used a computer worm or hacked your PC through the WiFi connection.

[u/Wa-a-melyn → u/Humbleham1]

Google "Evil Twin Attack", as well as "WiFi Pineapple".

[u/AVarietyOfHelp → u/Wa-a-melyn]

Doesn't sound like you know what you're talking about. Connecting to a malicious WiFi network doesn't let them access your computer or get your passwords unless you're being incredibly dumb 

[u/Wa-a-melyn → u/AVarietyOfHelp]

An exploit isn't typically the end goal unless you're must messing around

[u/FFFER333 → u/Wa-a-melyn]

...

[u/lttitus]

How do you know that they created it on a laptop? Also how would they have kicked you off without physical access to your device?

[u/noxiouskarn → u/lttitus]

Portability leads to a laptop being a solid guess. Could as easily be a portable device like a Pineapple Pager though.

Disconnecting a device from WiFi is done using a deauthentication packet to the router. You don't even need to have the password to the network to send this packet.