Skip to main content
Part of complete coverage on

Cyber criminals target travelers

By Tim Hume, for CNN
updated 6:11 AM EDT, Tue June 12, 2012
Using laptops without a privacy screen can expose your personal and professional information to shoulder surfers.
Using laptops without a privacy screen can expose your personal and professional information to shoulder surfers.
STORY HIGHLIGHTS
  • FBI has warned travelers that hackers are targeting their data via hotel Wi-Fi
  • I.T. experts say the risk of data loss is much higher when traveling
  • Public Wi-Fi in airports, conference centers and other public places is also risky
  • Data loss also commonly occurs through lost laptops and 'shoulder surfing'

Editor's note: Business Traveller is a monthly show about making the most of doing business on the road.

(CNN) -- A recent warning from the FBI about hackers targeting guests' data when they log into hotel Wi-Fi overseas was a salient reminder to travelers of the risks to data security on the road.

The alert, from the FBI's Internet Crime Complaint Center, was addressed to U.S. executives, government workers and academics but did not specify a particular country of threat. It warned of a spate of incidents of travelers encountering bogus software update pop-ups when they used hotel internet connections overseas. When they clicked on the "update," malicious software was installed on their computer.

Hotel Wi-Fi connections are particularly risky, said Sian John, UK security strategist at Symantec, because they are often set up without proper security settings. But they are merely one data-security threat among many facing business travelers.

From a data-security standpoint, travel is inherently risky, and the likelihood of private personal or corporate data being compromised is greatly increased the moment you hit the road, she said.

"One of the major ways data loss happens is when people are traveling," she said. "You're not in a secure area ... That is where the risks tend to arise."

See also: Why are we still paying for hotel Wi-Fi?

John said a major risk was that in getting online while on the road, travelers often turn to free Wi-Fi internet connections -- in hotels, but also at airports, conference centers and business facilities.

It's very easy to sit on one of these things and pick up the traffic going through them
Sian John, UK security strategist at Symantec

While security settings vary from network to network, many are left open and unmonitored, and travelers are frequently unaware that they could be unwittingly exposing themselves to data loss by logging on.

"Anyone can connect to them, which means anyone can look at the traffic going across them," she said. "It's very easy to sit on one of these things and pick up the traffic going through them. There are devices out there that let you hijack them."

Gary Davis, McAfee's director of global consumer marketing, said there was a growing trend of hackers setting up mock Wi-Fi hotspots in public places, which appear at the top of the list of available Wi-Fi connections.

"People will see 'free Wi-Fi' and click on it, and when they do that they open themselves up to great exposure," he said. The best approach is to be wary and steer clear of Wi-Fi hotspots that do not seem legitimate -- "something (that) looks like it's not quite right, not the proper name they might expect," he added.

Once compromised, hackers can take total control of a device, including removing all the data contained on it. Android devices are currently the devices most targeted by hackers, Davis said.

"We saw a 1,200% increase in malware targeting Android devices just in the first quarter of this year," he said.

John said the best approach for business travelers when using public Wi-Fi is to remotely log into their employer's virtual private network, or VPN, which ensures all data received and sent from a device is encrypted.

People will see 'free Wi-Fi' and click on it, and when they do that they open themselves up to great exposure
Gary Davis, McAfee's director of global consumer marketing

Travelers can also better protect themselves by using encrypted protocols -- simply typing "https:" instead of "http:" at the beginning of URLs -- although "https:" is not supported by all websites. And they should avoid transmitting sensitive information, such as work documents or credit card details, over public Wi-Fi spots. "I would be cautious of doing anything sensitive on them," John said.

But the risk of data loss begins even before logging on, she said. "People forget about the over-your-shoulder problem when traveling," she said. Travelers engrossed in their work in cafes, departure lounges or on transport are often unaware of prying eyes around them.

"Most people don't have a privacy screen on their laptop still, so anyone sitting next to you can look over your shoulder and see what you're doing."

See also: World's best airport restaurants

Another common cause of data loss is travelers losing their device outright, particularly when passing through security checkpoints.

"People put it in a tray and forget to put it back in the bag," she said, adding that hundreds of laptops are left in busy airports each week.

For that reason, some companies -- particularly in sensitive fields such as finance, pharmaceuticals and defense -- often issue top executives working with blank travel laptops especially for the trip. "When they come back, the company can then analyze what, if anything, happened on the devices, wipe them and reuse them," she said.

While the techniques used by hackers could be hard for non-IT professionals to detect, the best defenses against data loss are surprisingly common sense. Make sure security updates are completed before traveling. Keep a close eye on your possessions. And, like any traveler, give a wide berth to anything that seems slightly off.

While there have been major cases of data loss as a result of deliberate corporate espionage, John said, "there are also many, many instances of carelessness."

"Wherever you're traveling, take care of everything you've got," she said. "People take care of their passport -- you need to take the same care of your information technology."

ADVERTISEMENT
Part of complete coverage on
updated 9:56 AM EDT, Mon July 23, 2012
United Airlines mistakenly offered first-class return tickets from New York to Hong Kong for four air miles and $43.
updated 7:04 AM EDT, Mon July 16, 2012
The interior of a Hantings Inn hotel room.
Cashing in on China's travel boom is one hotel chain that's expanding so fast it's opening a new property every two days.
updated 9:13 AM EDT, Tue July 10, 2012
Extra charges added onto flight costs are a bugbear for air passengers -- so how fair are the fees that fliers love to hate?
updated 6:00 AM EDT, Wed July 4, 2012
For culture vultures in a hurry, airport galleries offer a cool way to sample high quality artwork on the fly.
updated 6:11 AM EDT, Fri June 22, 2012
Italo has been nicknamed the Ferrari on rail
Italy's first non state-run high speed rail company is looking to bring a touch of class to train travel.
updated 6:22 AM EDT, Fri June 22, 2012
A general view of the high-speed Deutsche Bahn ICE3 InterCity Express train at St Pancas International station on October 19, 2010 in London, England.
In Europe, private and public sectors are investing in high-speed rail. Here's a look at Europe's ever-growing high-speed network.
updated 10:42 AM EDT, Mon June 18, 2012
TARMAC engineers have removed the engines from this aircraft.
An aerospace company is bringing old aircraft parts back from the dead at the world's first plane recycling plant.
updated 6:11 AM EDT, Tue June 12, 2012
A recent warning from the FBI about hackers targeting guests' data when they use hotel Wi-Fi overseas was a reminder of the risks to data security on the road.
updated 6:49 AM EDT, Thu June 7, 2012
Business class seats on a Boeing 787 Dreamliner owned by All Nippon Airways September 25, 2011 in Everett, Washington.
The airline industry's latest tactic to increase revenue -- charging premiums for window and aisle seats -- is making it hard for groups to fly together, say passenger advocates.
updated 5:27 AM EDT, Wed May 30, 2012
Airport dining doesn't have to be terminal. Here are six of the best restaurants that are elevating airport food to a new level.
updated 6:35 AM EDT, Tue May 22, 2012
Switching off your cellphone during a flight will soon be a thing of the past, according to aviation experts.
updated 7:38 AM EDT, Tue May 15, 2012
Recording travel expenses is a pain for business travelers, but portable scanners and smartphone apps could simplify the process.
updated 5:26 AM EDT, Fri May 11, 2012
Facing a stopover of a few hours in Zurich? Don't waste it in the airport lounge. Check in your suitcase, and zip into the city for a brief encounter with a European cultural capital.
updated 9:04 AM EDT, Wed April 18, 2012
Paying extra for Wi-Fi is the new bugbear for today's traveler -- so why do so many hotels charge?
updated 6:53 AM EDT, Tue April 17, 2012
ctor Richard Gere attends the 6th International Rome Film Festival at Auditorium Parco Della Musica on November 3, 2011 in Rome, Italy.
Hollywood star Richard Gere takes CNN's Richard Quest on a tour of his boutique hotel.
ADVERTISEMENT