Ravi Sir's Cyber Security Cards › Revision Cards
Wi-Fi on Phones – Evil Twin and Captive Portal Awareness
Wi-Fi on Phones – Evil Twin and Captive Portal Awareness Two Wi-Fi tricks aimed at phones. Evil twin : a fake access point with a familiar name. Captive portal : the “click Accept” page, sometimes fake. The fake name (like “Sahyadri-Guest”) lures your phone. The fake portal asks for a Google or Micr
Read card text
What this card says
What it is
Two Wi-Fi tricks aimed at phones.
Evil twin: a fake access point with a familiar name.
Captive portal: the “click Accept” page, sometimes fake.
How it works
The fake name (like “Sahyadri-Guest”) lures your phone. The fake portal asks for a Google or Microsoft login.
Defence
Don’t auto-join open Wi-Fi. Don’t enter logins on a Wi-Fi page.
Use a VPN and check for HTTPS.
| Red team (attacker) does | Blue team (defender)… |
|---|---|
| Spins twin SSID near office | Staff training; EAP-TLS / known portals; VPN |
| Captive page steals Google password | Password managers that check domain; reject lookalikes |
| Downgrades / strips TLS where possible (awareness) | HTTPS / HSTS habits; VPN on untrusted nets |
Learn more in the lesson: 44.8 Wi-Fi on Phones – Evil Twin and Captive Portal Awareness