KRACK Attack Detection Feature

KRACK Attack Detection Feature

The Fingbox Wireless Intrusion Detection System (WIDS) is able to detect Evil Twin Access Points, which is a fundamental part of detecting and stopping KRACK attacks. This feature also enables Fingbox to alert you about many other types of attack which leverage Evil Twin Access Points.

You do not need to set up this feature – alerts for a KRACK attack, or any other attack on your WiFi, are automatic. To adjust whether you receive these alerts via push notifications and/or emails please check your settings.

Screenshot of an attack within the Event Log

The type of email you would receive if Fingbox detected a KRACK Attack

Once Fingbox identifies an Evil Twin Access Point you should take immediate action:

• Turn off your WiFi network equipment for 15 minutes and wait. Make sure to turn off or disable WiFi from all client devices (like e.g. mobile phones, laptops, etc). Then restart networking and see if the Evil Twin Access Point still appears.
• If the problem persists contact Fing support to check if it’s a false alarm – it is unlikely to be a false alarm because of our persistent testing against false alarms so keep your devices disconnected from the network until it has been investigated.