“Krack’ a new exploit founded by researchers can potentially make W-Fi encryption completely useless. This means that anyone that uses the “Krack” exploit can hack into your router and see exactly what you search and can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, and much more!
— Pentester Academy (@SecurityTube) October 18, 2017
What is Krack & What Can Krack Do?
Krack is an exploit found in the WPA2 system, which is a military grade security feature that secures the connection between a router and any device that’s connected through a Wi-Fi connection to the router. Using Krack, hackers or anyone else that has malicious intent towards you can breach the safety of your router and easily spy on your through your home cameras, steal sensitive information and eavesdrop on unencrypted (non-HTTPS) traffic or compromise your computer by slipping malware into legitimate websites.
The only silver lining in the entire scenario is that the person carrying out the hack needs to be physically within the range of your Wi-Fi connection which means that you don’t have to worry about being sent malicious files over the internet. For many people, this makes it a minimal threat but when you’re using your smartphone or laptop while being connected to a public Wi-Fi your security can be at risk.
How to Protect Against Krack?
All major companies have picked up on the threat but the downside is that even though they are working on patches it can take some time. The earliest upcoming patch we have is from Apple that will take a few weeks to get here and others still don’t have a set release window. In the meantime, it’s highly recommended that you use Ethernet connection than a Wi-Fi connection at home and minimize Wi-Fi usage when in public places.