Reply to topic  [ 7 posts ] 
Wireless Security Problem 
Author Message
Spends far too much time on here
User avatar

Joined: Thu Apr 23, 2009 6:44 pm
Posts: 4141
Location: Exeter
Reply with quote
I have a friend who's having an issue with his wireless and someone apparently managing to gain access. The router is enabled with WPA2 and MAC address filtering. The following is what he advised me via MSN:

when you open network in my computer a phone called occam appears intermittently, it's an Nexus 4 and it has a MAC address that does not match anything in the house, including the two smartphones with connections, (which do not show up in there anyway) checked the router to see if someone was trying to sponge off the wifi (again), but it is never shown up as a connected device only signs of potential weirdness is in data downloaded on the router's status... it seems higher than it should be

Anyone any idea what the hell is going on?

_________________
"The woman is a riddle inside a mystery wrapped in an enigma I've had sex with."


Thu Jan 24, 2013 4:17 pm
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:58 pm
Posts: 8767
Location: behind the sofa
Reply with quote
Does the computer he uses have bluetooth enabled?

_________________
jonbwfc's law: "In any forum thread someone will, no matter what the subject, mention Firefly."

When you're feeling too silly for x404, youRwired.net


Thu Jan 24, 2013 6:39 pm
Profile WWW
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:46 pm
Posts: 10022
Reply with quote
Does it have the software installed? Disable any drivers/software for the phone and if poss, disable bluetooth. I'd probably change the router password, change and hide the SSID and go from there. If you can disable the wireless aspect of it and run just cabled, it'll give a better idea of whether it's outside or inside (eg computer itself).

_________________
Image
He fights for the users.


Thu Jan 24, 2013 6:52 pm
Profile
Spends far too much time on here
User avatar

Joined: Thu Apr 23, 2009 6:44 pm
Posts: 4141
Location: Exeter
Reply with quote
No Bluetooth on the computer.

By way of additional information, whoever owns this device had managed to hack the router when it just had a WPA2 key on it and change all the settings. As such, I suspect hiding the SSID will be pointless. This is also why the MAC address filtering was added.

_________________
"The woman is a riddle inside a mystery wrapped in an enigma I've had sex with."


Thu Jan 24, 2013 6:57 pm
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:58 pm
Posts: 8767
Location: behind the sofa
Reply with quote
If he's spoofing the MAC address then I guess it won't show as an additional wireless client on the router.

Hiding the SSID actually makes it slightly easier to hack WPA because it increases the amount of chatter when no data is being transferred.

However, it can take a long time to crack WPA2 so if he changes the password regularly, the guy might give up. Also, if he switches the wireless off when it's not in use then that will also hinder any attacker.

PITA I know, but if someone is going to that length to break into the network then you don't know what else they might be able to find out. It's a lot of effort just for free WiFi.

_________________
jonbwfc's law: "In any forum thread someone will, no matter what the subject, mention Firefly."

When you're feeling too silly for x404, youRwired.net


Thu Jan 24, 2013 8:22 pm
Profile WWW
Spends far too much time on here

Joined: Fri Apr 24, 2009 9:44 pm
Posts: 4860
Reply with quote
what router ?
is it a BT home hub as they may have enabled the router to be a hotspot
you will have to contact BT to get it disabled

does the router have a guest network wifi setup
if so disable it ...

_________________
Hope this helps . . . Steve ...

Nothing known travels faster than light, except bad news ...
HP Pavilion 24" AiO. Ryzen7u. 32GB/1TB M2. Windows 11 Home ...


Thu Jan 24, 2013 10:39 pm
Profile
Occasionally has a life
User avatar

Joined: Thu Apr 23, 2009 7:04 pm
Posts: 269
Location: Gateshead, Tyne and Wear
Reply with quote
Thanks for the responses... and thanks jonlumb for posting on my behalf...

Now i've got my login sorted out... now to answer you questions...

Neither of the PCs have bluetooth

passkey is checked semi-regularly, SSID generally not... though it has been changed a few times recently...

SSID is not hidden

the devices, of which there have been 3, only appear when wifi is enabled on the router. they don;t show as a connected device on the router but the do show up in the 'Network' section of My Computer [which is also odd as the 2 smartphones in the house don't]

router does have a guest wifi option, which is always turned off,

and finally router is a Netgear VMDG485 aka the Virgin Media 'SuperHub'


Sat Jan 26, 2013 3:32 pm
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 7 posts ] 

Who is online

Users browsing this forum: No registered users and 9 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software.