DEF CON crowd suspected in fake-hotspot attack on Delta flight

During a recent Delta Air Lines flight traveling from Las Vegas to Atlanta, crew members detected an unauthorized wireless network that disrupted the onboard passenger internet service.

The occurrence took place immediately following the conclusion of the annual DEF CON cybersecurity conference in Las Vegas, leading to suspicions that attendees of the event may have been involved. The activity was initially flagged via publicly accessible air-to-ground radio transmission logs, which revealed that the flight crew reported a group of passengers from a cyber conference had successfully blocked the standard cabin Wi-Fi and broadcasted their own alternative signal to other travelers.

According to subsequent online reports and airline statements, the unauthorized network operated as a deceptive "evil twin" access point named specifically to mimic the official carrier service. This rogue network redirected connected users to a fraudulent portal designed to harvest personal login credentials from unsuspecting passengers. In response to the active security threat, the flight crew temporarily deactivated the legitimate onboard internet connection for approximately thirty minutes. Although Delta Air Lines representatives later confirmed the brief presence of the rogue hotspot, they assured the public that the flight's operational safety was never compromised and no critical aviation control systems were impacted. The Federal Bureau of Investigation's Atlanta office has since initiated an inquiry into the incident, though law enforcement has not yet detained any suspects.