Reply To: Account hacked

[Ihar]

runnerbean wrote:

@the Ihar I only use my phone data if I need to use my password manager away from home. Is this safer than whatever free WiFi is offered, or should I still be using a VPN?

Yes, your mobile provider should offer a secure connection (though without a VPN your provider can still see what sites you’re visiting, mainly for marketing purposes).

One issue is that I can buy the domain “freebawifi.com” today (with a security certificate) and set up a wifi hotspot in the lounge. Now any unencrypted traffic (not https) I can intercept. Worse, I can easily navigate you to https://executiveclub.co.uk via a landing page to login to your BA, steal your credentials without you knowing but pass them onto BA so they show the real “response page” (man in middle attack) . Then mess with your account whilst you are in the air.

Using a VPN solves some of this. More is about being careful that you are really on the right website (anyone can make an imitation BA website in seconds). Best is using separate passwords for EVERY site, because if compromised it will only be for that site.