{"id":33602,"date":"2014-03-05T16:12:33","date_gmt":"2014-03-06T00:12:33","guid":{"rendered":"http:\/\/blogs.mcafee.com\/?p=33602"},"modified":"2025-08-18T00:54:57","modified_gmt":"2025-08-18T07:54:57","slug":"chameleon-wifi-virus","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/chameleon-wifi-virus\/","title":{"rendered":"Chameleon: the Wi-Fi Virus That Hides in Plain Sight & Spreads Like a Cold"},"content":{"rendered":"

Recently, a group of researchers at the University of Liverpool<\/a> successfully tested a new virus with a terrifying potential. It doesn\u2019t spread by the usual means, but this new infection has all the markings of a communally spread illness. The virus, dubbed “Chameleon<\/a>,” infects Wi-Fi networks in densely populated areas and spreads “as efficiently as the common cold spreads between humans.” Chameleon is heralding in a new era of technological viruses, and one that we must prepare for.<\/p>\n

Unlike most malware<\/a> and viruses previously discussed on my blog, Chameleon doesn’t infect computers or mobile devices. Instead, it opts to infect access points<\/i>. Access points are outlets within a network where a device, whether wirelessly or not, connects to the Internet. In this case, Chameleon purposefully targets access points\u2014usually in the form of a wireless router\u2014that uses default passwords, no passwords or weak encryption standards.\u00a0Once an access point is infected, a hacker can easily determine the credentials of the devices connected to that access point and use that to further perpetuate their attack.<\/p>\n

These access points are particularly vulnerable for a few reasons: 1) the default settings on these devices are rarely changed by consumers, making it easier for hackers or viruses to bypass security with known default passwords; 2) routers rarely have any built-in antivirus protections, leaving a massive hole open for exploitation by hackers; and finally, 3) many wireless networks, especially those at coffee shops, are intentionally left open for people to easily access the connection. The unsecured nature of public networks<\/a> makes them a lucrative target for hackers looking to collect a large amount of data fast.<\/p>\n

At present in the U.S., this threat is only a proof-of-concept (in that it hasn\u2019t actually been discovered publically, or in the wild, and was instead created by researchers in a controlled environment). In Asia and Europe, however, actual attacks on home office wireless routers are very much a reality.<\/a> This week, an attack on more than 300,000 routers was discovered overseas. This attack stems from a different virus than the Chameleon strain discussed here\u2014but it goes to show the threat is very real. The sheer number of home routers and gateways that are vulnerable to attacks makes them a very attractive target to cybercriminal groups.<\/p>\n

And, as with a cold, the success of this virus depends on population density. The more Wi-Fi networks with overlapping access points, the more likely an infection will occur and more likely the virus will spread. What’s worse is Chameleon can spread largely undetected precisely because it infects wireless networks, not computers or smartphones where security programs can pick up on the suspicious behavior. All it has to do is infect a router and wait to collect data sent through the router from connected devices.<\/p>\n

Luckily, were Chameleon ever to see the light of day, it could easily be defended against. All users have to do is secure their network router with strong, unique passwords.<\/p>\n

We’ve discussed the importance of securing your networks<\/a> and your devices before. The advent of the airborne computer virus only reinforces that point because, in all likelihood, it’s only a matter of time until a virus like Chameleon hits the streets.<\/p>\n

Protect Yourself Against Wi-Fi Viruses<\/h2>\n

So what can you do to protect yourself against Wi-Fi viruses such as this one? Here are a few suggestions:<\/p>\n