03/02/2022
Short for "fragmentation" and "aggregation", Frag attacks allow hackers to bypass firewalls to inject code into Wi-Fi traffic.
Wi-Fi network
A new set of vulnerabilities known as Frag attacks have been discovered in Wi-Fi-enabled devices. Some of these issues date back to the original Wi-Fi standard that was first established in 1997.
So, how do Frag attacks happen? Which devices are most vulnerable? And how can you protect against them?
What Are Frag Attacks?
Belgian academic and security researcher Mathy Vanhoef discovered twelve different vulnerabilities in Wi-Fi devices which have the potential to turn into security issues. These are better known as Frag attacks.
A Frag attack does one of the two things:
It captures traffic passing through unsecured networks, mimics it, and then impersonates servers.
It injects the network traffic with malicious plaintext frames that resemble handshake messages.
To put it simply, the Frag attacks dupe your WI-Fi-connected devices into thinking they are conducting safe business.
Which WI-Fi Flaws Are Responsible for Frag Attacks?
During the discovery of Wi-Fi vulnerabilities, it was concluded that three of the issues pertained to design flaws within the Wi-Fi protocol, while the rest were programming mistakes.
The biggest downside to these vulnerabilities is that they make it possible to access even fully secure Wi-Fi networks with WPA2 or WPA3 encryption in place.
One major vulnerability was found in the fragmentation process which is an integral feature of a Wi-Fi network used for improving performance degradation for excessive background noise. By splitting data into manageable fragments or "chunks" for transmission, they can be reassembled with ease when received.
Unfortunately, Vanhoef discovered security weaknesses in the process. He said:
“You can cause a receiver to reassemble two fragments that belong to different packets or even store malicious data and combine it with legitimate information. Under the right conditions, this can be used to exfiltrate data.”
Also, in certain cases, attackers can inject malicious packets of data through a router's firewall if a connected device is vulnerable. This allows the hackers to unmask IP addresses and destination ports used to access the device.
Which Devices Are Most Vulnerable to Frag Attacks?
Unfortunately, every Wi-Fi device to date is vulnerable to Frag attacks as the discovered vulnerabilities go back to 1997 when the Wi-Fi base standard was first released.
The good news is that the vulnerability was not revealed to the public until nine months after its discovery. This gave most companies ample time to release security patches and update their devices against these attacks.
In its attempt to protect Windows against the Frag attacks, Microsoft published an update on March 9, 2021.
Main Risk Factors for Frag Attacks
Worried about falling prey to potential Frag attacks? Then you should know about the two main risk factors for these attacks.
Data Theft
A Frag attack can be used by an attacker to steal and intercept data from a Wi-Fi network. Most websites and applications that employ HTTPS and other types of encryption are protected against such attacks.
However, if unencrypted data is sent over an encrypted Wi-Fi connection, a Frag attack can potentially bypass the encryption and cause data theft.
Related:
Does HTTPS Protect Data in Transit?
Attacks Against Vulnerable Devices
Most smart home and IoT devices can be vulnerable to a Wi-Fi Frag attack. Smart devices manufactured by unknown brands such as an inexpensive smart plug or smart light bulbs might not offer the necessary long-term support and updates, causing these devices to easily fall victim to Frag attacks.
In reality, it should not matter because every device, whether big or small, is connected to a trusted home network. But since Frag attacks can bypass a Wi-Fi network's encryption, any device can be targeted directly just as if it was connected to the same network.
Should You Be Worried About Frag Attacks?
If you own a device that is connected to a Wi-Fi network, then you should be concerned even though no known cases of Frag attacks have been documented yet. The mere fact that the vulnerabilities were discovered in the Wi-Fi design poses a risk for a potential attack at all times.
Welcome to P-ChatRoom
