Maharashtra Cyber Issues Public Wi-Fi Warning After Fraud at CSMT
Maharashtra Cyber has issued a public advisory warning citizens against the security risks of using open public Wi-Fi networks at locations such as Chhatrapati Shivaji Maharaj Terminus, airports, cafes, and railway stations. The cybersecurity agency cautioned that open hotspots can act as traps where cybercriminals intercept data traffic, personal information, and financial credentials.
The advisory follows a recent incident earlier this month in which a General Manager of a government bank lost Rs 4.27 lakh. The official's phone was allegedly compromised through a fake APK file after his personal secretary connected to the free Wi-Fi service at Chhatrapati Shivaji Maharaj Terminus.
According to Maharashtra Cyber, cybercriminals actively exploit unsecured networks to target unsuspecting users. The agency noted that the attack vector typically unfolds across five distinct stages, beginning when a person connects to an open or spoofed network. Once connected, hackers on the same network can silently intercept traffic, access session cookies, and steal passwords and financial credentials, resulting in unauthorized account access and monetary loss.
To counter these threats, Maharashtra Cyber urged citizens to adopt several protective measures. Users are advised to verify the exact Wi-Fi network name with venue staff before connecting and to avoid carrying out financial tasks, including online banking or shopping, while using public networks.
The agency further recommended using cellular mobile data or a secure Virtual Private Network (VPN) rather than open connections. Internet users were also instructed to disable automatic Wi-Fi connection settings on smartphones and laptops to prevent their devices from linking to rogue networks without authorization.
Maharashtra Cyber stated that victims of online fraud or those who notice suspicious cyber activities should report incidents immediately. Complaints can be lodged through the national cybercrime helpline number at 1930 or submitted online via the official portal at www.mhcyber.gov.in.
