Delta Air Lines flight targeted by mid-air Wi-Fi phishing attack

A Delta Air Lines Boeing 757 flight from Las Vegas to Atlanta was targeted by a mid-air Wi-Fi phishing attack, prompting a federal investigation. The incident occurred as passengers were returning from the DEF CON cybersecurity convention.

Using a technique known as an ‘evil twin’ attack, bad actors utilized portable hacking tools to broadcast a fraudulent network named ‘Delta WiFi Fast.’ The attackers used deauthentication packets to forcibly disconnect passengers' devices from the legitimate aircraft Wi-Fi, redirecting them to a fake landing page designed to steal personal credentials and banking details.

In response to the disruption, the flight crew deactivated the aircraft’s Wi-Fi connectivity for approximately 30 minutes. Pilots used the Aircraft Communications Addressing and Reporting System (ACARS) to alert ground operations and Delta corporate security about the jamming and the presence of cybersecurity specialists on board. Upon landing at Hartsfield-Jackson Atlanta International Airport, FBI agents and airport police intervened to question suspects and seize wireless transmission equipment.