{"id":5681,"date":"2014-06-03T12:57:41","date_gmt":"2014-06-03T16:57:41","guid":{"rendered":"http:\/\/blog.nccomputertech.com\/?p=5681"},"modified":"2014-06-03T12:57:41","modified_gmt":"2014-06-03T16:57:41","slug":"meet-cupid-the-heartbleed-attack-that-spawns-evil-wi-fi-networks","status":"publish","type":"post","link":"https:\/\/nccomputertech.com\/techtalk\/2014\/06\/03\/meet-cupid-the-heartbleed-attack-that-spawns-evil-wi-fi-networks\/","title":{"rendered":"Meet \u201cCupid,\u201d the Heartbleed attack that spawns \u201cevil\u201d Wi-Fi networks"},"content":{"rendered":"
\n
\"\"<\/a>
\n
Enlarge<\/a> \/ A packet capture showing Cupid attacking a wireless network.<\/div>\n
SysValue<\/a><\/div>\n

 <\/p>\n

 <\/p>\n<\/figcaption><\/figure>\n

It just got easier to exploit the catastrophic Heartbleed vulnerability against wireless networks and the devices that connect to them thanks to the release last week of open source code that streamlines the process of plucking passwords, e-mail addresses, and other sensitive information from vulnerable routers and connected clients.<\/p>\n

Dubbed Cupid, the code comes in the form of two software extensions. The first gives wireless networks the ability to deploy “evil networks” that surreptitiously send malicious packets to connected devices. Client devices relying on vulnerable versions of the OpenSSL cryptography library can then be forced to transmit contents stored in memory. The second extension runs on client devices. When connecting to certain types of wireless networks popular in corporations and other large organizations, the devices send attack packets that similarly pilfer data from vulnerable routers.<\/p>\n

The release of Cupid<\/a> comes eight weeks after the disclosure of Heartbleed<\/a>, one of the most serious vulnerabilities to ever hit the Internet. The flaw, which existed for more than two years in OpenSSL, resides in “heartbeat” functions designed to keep a transport layer security (TLS) connection alive over an extended period of time.<\/p>\n