Researchers warn of a serious flaw in the WPA2 protocol securing all wifi networks-- one allowing attackers to steal passwords, emails and other supposedly encrypted data!
Dubbed Key Reinstallation Attacks (or KRACKs), such attacks even allow those with malicious intent to inject ransomware and malware into a website a user is visiting, all while simply being in range of a vulnerable device. These can be any wifi-capable device, although the flaw is "particularly devastating" in the case of Linux and Android 6.0.
How does KRACK works? As the researchers put it, attackers can duplicate a vulnerable WPA2 network, impersonate the MAC address and change the wifi channel. The fake network acts as a "man in the middle," forcing devices to connect to the rogue network instead of the protected original.