Crooks could hack into online bank details if you have an unsecured wi-fi connection, warns Clare Francis
Attend an evening with Andre Agassi
THOUSANDS of consumers who have upgraded to wireless broadband, which lets you access the web anywhere in the home, are leaving themselves vulnerable to fraud.
About 5m households now have wireless - or “wi-fi” - internet access. However, about half, mostly those who have bought their wireless equipment from stand-alone firms such as Netgear, have not protected their connection. Uswitch, a comparison service, warns that anyone with an unsecured connection is open to fraud.
Neighbours could log in and piggy-back on your internet access, while hackers could access files and spy on the websites you have used.
They could work out when you are away on holiday if you have booked online, for example, and also see which internet bank you use. Then, with the right software, they could hack in to uncover your account details and potentially steal cash.
Unsecured wi-fi makes this much easier: if your computer had a secure connection, fraudsters would not be able to see which websites you had visited.
Jason Lloyd at Moneysuper-market said: “The security of wireless routers in the home is a serious issue that most people overlook. A hacker with the right software and knowhow could easily access files and records and potentially uncover passwords to online bank accounts.”
It is alarmingly straightforward for fraudsters to identify homes with unprotected wireless connections. They no longer have to trawl streets at random with their equipment to find vulnerable homes; they can now purchase software that can identify such households remotely.
However, it is not difficult to protect your internet connection. Most broadband providers, including Orange, BT, AOL and Sky, issue wireless modems that are already secured or “locked”.
The problem comes when you buy a wireless router from a manufacturer such as Netgear, Link-sys or D-Link through retailers such as PC World or Currys, because you have to secure it manually, and you can easily miss out this step in the process.
The easy option is to go for the modem from your broadband provider, although they are not free with all broadband deals. Orange offers a free wireless router, its Livebox, but only to those on its £19.99 a month package. Its cheaper £14.99 a month plan has no wireless router.
Talk Talk customers must pay £49.99 for a wireless router. Some providers, such as Virgin Media, formerly NTL and Tele-west, don’t offer them at all.
Stand-alone wi-fi routers cost from about £30.
If you regularly chase the best broadband deals, Steve Weller at Uswitch said getting a modem from your provider may not be the best option. Companies often only loan you the equipment, so it is configured to work with just one provider.
If you buy a stand-alone router, on the other hand, it can be used with most providers — the only restriction is that you need a different type if you have cable rather than a BT line.
Even if you have a secure connection, however, you are not necessarily safe. Last week experts in America warned of a new threat to wi-fi - dubbed drive-by pharming - which affects people whose connections are secure, but who have not changed their default router password.
Pharming is similar to phishing - where criminals send you an e-mail, often purporting to be from your bank, asking you to click on a web link and confirm certain security details.
Rather than taking you to the genuine website, the link directs you to a bogus one. If you then provide your account details, the criminal has all he or she needs to plunder your account.
With drive-by pharming, criminals set up a malicious code on a website, which is released when you visit the site and is sent to your router.
This changes the settings on your router so that when you next connect to the internet and visit certain websites, such as your bank’s, you are redirected to a fake one and the criminal is able to obtain your account and log-in details.
Fraudsters can do this because they know the default passwords used by the main router manufacturers, and few people change them.
Symantec Security Response, which carried out the research, said it did not think anyone had lost money in this way - yet.
YOUR QUESTIONS ANSWERED
How do I know if my wireless connection is secure?
Most of the big broadband providers, including Orange, BT, AOL and Sky, issue
wireless modems that are already secured or ‘locked’ with some of their
deals. They come with wireless encryption protocol (Wep) or wi-fi protected
access (WPA) codes. When you link your computer to the router, you will need
to input the Wep or WPA code to access your broadband. This has to be done
just once, but for every computer in your house, and ensures your wi-fi
connection can only be used with those machines.
What if I didn’t get my router from my provider?
Many people buy stand-alone routers because they are cheaper and make it
easier to switch deals. And some broadband firms do not even offer them. You
have to secure these routers manually. The set-up wizard will provide
prompts, but these can be bypassed. Make sure you do not ignore them, and
input your Wep or WPA code.
If I have a secure connection, am I safe?
No, even if you have input your Wep or WPA, you could still fall victim to the
new threat of ‘pharming’. This is where criminals change your router
settings so that when you connect to the internet and visit certain sites,
such as your bank, you will be redirected to a fake site.
Fraudsters can do this because they know the default passwords, and few people change them. Your user guide should tell you how to connect to your router settings - usually done by typing a number into your web browser. Once connected you should go to the admin page where you will be able to change your password. This will prevent hackers from being able to access your router.
Industry sectors news at a glance. Interactive heatmap, video and podcast
Everything the Business Traveller needs to know to make a better trip
Get ready for the winter sports season, with our resort guides and snow reports
We are backing British business, what is the confidence of the nation and what businesses are succeeding?
Growing demand for energy, oil that is harder to reach and the rise of carbon dioxide emissions. We examine the energy challenge
With rail travel in Europe on the rise, we review the benefits of travelling by train
In this special section we explore new food trends to help improve your dinner party and impress guests
Enjoy further reading from Travel to Fashion, Business to Sport, discover more






1998
£47,955
12 months for the price of 11 and a 5% discount.
Offer ends 31/11/09
Check your free Experian credit report before applying
Car Insurance
to £60K + bonus (OTE £90k)
Lord Search & Selection
Location Flexible
PwC’s Consulting practice helps businesses of all shapes
and sizes work smarter and grow faster.
£85k
CPA
Highly Competitve
Specsavers
Whiteley, near Southampton
Moments from Battersea Park.
For sale with Winkworth
Find out about shared ownership.
See your free Experian credit report beforehand
7nts - Penang £499; Borneo £699; All Inclusive £799 including flights, taxes, accommodation and private transfers
For your ultimate tailor-made ski holiday, click here
Get covered on your travels with a superb range of policies at great prices. Visit InsureandGo.com
World Class Golf, Spa and preferential Beach Club. Private estate overlooking West Coast
Villas from £275 per night inclusive of Golf
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Globrix Property Search | Milkround
Copyright 2009 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.