Researchers in Britain have shown for the first time how a computer virus can spread through Wi-Fi “as efficiently as the common cold spreads between humans.” The 'Chameleon’ Wi-Fi AP-AP virus infiltrates dense networks and spreads at an alarming rate.
Chameleon was designed by a team of researchers from the
University of Liverpool, and displayed a ‘remarkable amount of
intelligence’ in its capacity to spread in a similar way to the
The virus “was able to avoid detection and identify the points at which Wi-Fi access is least protected by encryption and passwords,” according to a release published on the university’s website. The areas which are generally ‘least protected’ are public access points – such as free Wi-Fi in cafes and airports.
Network Security Professor, Alan Marshall, stated that the virus doesn’t attempt to damage existing networks but instead infiltrates the data of all users connected to a network via Wi-Fi .
“WiFi connections are increasingly a target for computer hackers because of well-documented security vulnerabilities, which make it difficult to detect and defend against a virus,” said Marshall.
“It was assumed, however, that it wasn’t possible to develop a virus that could attack Wi-Fi networks but we demonstrated that this is possible and that it can spread quickly. We are now able to use the data generated from this study to develop a new technique to identify when an attack is likely,” he added.
Chameleon’s success lies in the means by which it avoids detection – the majority of anti-virus software packages looks for infections which are present on computers and the Internet, rather than publicly-used Wi-Fi networks.
“When Chameleon attacked an AP (access point) it didn’t affect how it worked, but was able to collect and report the credentials of all other Wi-Fi users who connected to it. The virus then sought out other Wi-Fi APs that it could connect to and infect,” Marshall said. That the virus doesn’t disrupt the network itself, but instead those connecting to it, makes it all the more subversive and dangerous.
The virus was found to travel the most quickly between access points which were within a distance of 160 feet, prompting the ‘common cold’ comparison.
“As demand drives up the availability and use of WiFi, the geographical area that an attack can exploit increases exponentially,” the study noted.
There are plans in place to examine the data generated by the study “to develop a new technique to identify when an attack is likely,” according to Marshall.