A 44-year-old Australian man was sentenced to 7 years and 4 months in prison for running fraudulent “evil twin” Wi-Fi networks in airports and on domestic flights across Australia, aiming to steal personal data from unsuspecting travelers.

Authorities seized a portable wireless-access device used to create rogue hotspots, along with the suspect’s laptop and mobile phone.
He cloned the SSID of legitimate public Wi–Fi networks (e.g., airport Wi-Fi), tricking travelers into connecting to his fake hotspot — believing it genuine.
Once connected, victims were redirected to a phishing page to enter their login credentials (social media, email), which he then used to hijack accounts and steal intimate photos and videos — mostly of female victims.
Forensic analysis uncovered thousands of stolen private files, credentials, and logs of fake Wi-Fi pages.
After his equipment was confiscated, the man attempted to cover his tracks: he deleted over 1,700 items from a cloud storage account and tried to remotely wipe his phone — without success.
The “evil twin” Wi-Fi attack is a type of man-in-the-middle scheme where a hacker sets up a bogus access point imitating a legitimate public network — intercepting traffic or capturing credentials.
This case serves as a stark reminder: public Wi-Fi networks, even in airports or flights, are not safe by default — attackers can exploit trust and convenience.
If you travel and use public Wi-Fi — verify network names, avoid entering passwords or login info while connected, and always use VPN, especially on flights or in airports. This sentence proves cybercrimes have serious real-life consequences.