Wi-Fi-Hopping Malware Behaves Like Actual Virus

This malware is sick: The experimental "Chameleon" malware spreads rapidly among Wi-Fi networks in densely populated areas, much as a disease spreads through crowded urban areas. 

Developed in a laboratory at the University of Liverpool in England, Chameleon is the first malware known to propagate by hopping from one Wi-Fi network to another.

MORE: Best Antivirus Software 2014

"It was assumed ... that it wasn't possible to develop a virus that could attack Wi-Fi networks; but we demonstrated that this is possible and that it can spread quickly," Alan Marshall, Professor of Network Security, said in a statement.

Chameleon is technically a worm, not a virus, because it replicates without human assistance by trying to crack the password of each new Wi-Fi router it encounters. Chameleon nevertheless behaves like a biological infectious organism, jumping among overlapping Wi-Fi networks as an airborne disease spreads among humans. 

The researchers simulated Chameleon infections in London and Belfast and found that just a few infected devices can spread the worm to "thousands of infected devices within 24 hours."

Furthermore, because Chameleon doesn't migrate beyond Wi-Fi routers, it is undetectable to current anti-virus software, which scans for threats on computers and the Internet.

In its current state, Chameleon doesn't do much more than replicate itself and identify poorly protected Wi-Fi networks, but the researchers say in their paper that such malware could be used to eavesdrop on Internet traffic, alter or destroy data packets or destroy an infected Wi-Fi router.

Chameleon doesn't exist in the wild, so there's no real risk of infection. The good news is a strong Wi-Fi password will keep your router safe from this kind of malware; if it can't break into your router, it will simply move on to the next available one.

The bad news is that many commercial and private Wi-Fi networks have weak passwords, or simply aren't password-protected at all.

In that sense, a Wi-Fi password is like a vaccine; having it will protect not only you, but the people (or Wi-Fi routers) around you as well.

Email jscharr@techmedianetwork.com or follow her @JillScharr and Google+.  Follow us @TomsGuide, on Facebook and on Google+.

TOPICS

Jill Scharr is a creative writer and narrative designer in the videogame industry. She's currently Project Lead Writer at the games studio Harebrained Schemes, and has also worked at Bungie. Prior to that she worked as a Staff Writer for Tom's Guide, covering video games, online security, 3D printing and tech innovation among many subjects. 

Latest in Malware & Adware
Green skull on smartphone screen.
Malicious Android apps with 60 million installs bombarding phones with ads and phishing attacks — how to stay safe
Malware
Dangerous new password-stealing trojan automatically reinstalls itself on infected PCs
An FBI agent typing on a computer
FBI issues warning to millions of Americans to avoid these websites that can steal your passwords and banking info
A hacker typing quickly on a keyboard
New MassJacker malware is hijacking digital wallets to steal large sums from users
A person trying to set up a new Wi-Fi router
Thousands of TP-Link routers have been infected by a botnet to spread malware
A smartphone screen displaying the Android name and logo next to a sign reading 'MALWARE'.
Fake Google Play Store pages are spreading Trojan malware that can steal your financial data
Latest in News
Nintendo Switch 2
Nintendo Switch 2 tipster may have just leaked release month and launch plans
Disney Plus logo
Disney Plus upgrade just fixed one of my biggest problems with the home page
Tom Hiddleston as Robert Laing in "High Rise" now streaming on Netflix
5 best Netflix movies in March you haven't watched yet
iPhone 16 with Apple Intelligence logo for iOS 18.1
iOS 18.4: All the newest Apple Intelligence features coming to your iPhone
Maria Debska in "Just One Look" now streaming on Netflix
3 best Netflix shows in March you haven't watched yet
Split image featuring the Galaxy S25 Edge (left) and Galaxy S25 Ultra (right)
Samsung Galaxy S25 Edge just tipped for two Galaxy S25 Ultra-level features
  • coolitic
    So, it's a virus plus a worm?I dont think this is that important unless many people are being infected.
    Reply
  • fearless1333
    Infecting a router is a big deal and provides the owner of the virus with a ton of sensitive information. Some things a hacker could potentially have access to would be all login credentials, HTTP code injection, using the infected network for DoS attacks, DNS spoofing, etc. all remotely without the need for an MitM attack. Potentially this is huge as previously the above exploits would only be possible if you are connected to the wireless network locally, but with the virus you can sit at home with access to millions of WiFi networks and harvest credentials in bulk.
    Reply
  • hitman40
    Infecting a router is a big deal and provides the owner of the virus with a ton of sensitive information. Some things a hacker could potentially have access to would be all login credentials, HTTP code injection, using the infected network for DoS attacks, DNS spoofing, etc. all remotely without the need for an MitM attack. Potentially this is huge as previously the above exploits would only be possible if you are connected to the wireless network locally, but with the virus you can sit at home with access to millions of WiFi networks and harvest credentials in bulk.
    No offense or anything and not trying to be harsh, but is your comment an extension of the article? yes we know it has a potential to be bad.
    Reply
  • house70
    This is NSA's wet dream.
    Reply