Read: 5 Tips to Keep your Child Safe on Social Media

Terms to Know

• Man-in-the-Middle Attacks-  is a form of eavesdropping where communication between two users is monitored and modified by an unauthorized party. 
• Rogue Access Point- A rogue access point is a wireless access point that has either been installed on a secure company network without explicit authorization from a local network administrator or has been created to allow a hacker to conduct a man-in-the-middle attack.
• Packet Sniffing/ Packet analysis-  A packet analyzer (also known as a network analyzer, protocol analyzer or packet sniffer—or, for particular types of networks, an Ethernet sniffer or wireless sniffer) is a computer program or piece of computer hardware that can intercept and log traffic that passes over a digital network or part of a network.
• DNS Spoofing- DNS spoofing, also referred to as DNS cache poisoning, is a form of computer security hacking in which corrupt Domain Name System data is introduced into the DNS resolver's cache, causing the name server to return an incorrect IP address.

Applications Needed

• Wi-Fi Pineapple- The Wi-Fi Pineapple is a device that closely resembles a Wi-Fi access point. Designed for penetration testing, it can be re-purposed to perform malicious man-in-the-middle attacks. 
• Wireshark- Wireshark is a free and open source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education.
• Driftnet- Driftnet is a tool that is used to capture images when hackers launch a Man-in-the-Middle Attack.
• Kali Linux- Kali Linux is an advanced penetration testing Linux distribution used for Penetration Testing, Ethical Hacking, and network security assessments. Sadly, it is also used for non-ethical hacking.

Best Advice

• Purchase a VPN
• Turn off sharing settings, so others on the network cannot access your information
• Use two-factor authentication for all login credentials on accounts
• Turn off Wi-Fi whenever you are not using it – this prevents it from automatically connecting and putting you at risk
• Always use HTTPS for websites you visit
• Use a firewall
• Update your settings to forget network, preventing these networks from being saved on your phone and automatically connecting without you knowing.

Sources: