Fake “Delta WiFi FAST” Tricked Flyers

How the attack worked

On a Delta flight, a passenger allegedly stood up a rogue Wi-Fi hotspot named “Delta WiFi FAST,” a name close enough to the real in-flight network to look legitimate at a glance. To increase the odds that other passengers would connect, the attacker reportedly tried to disrupt the legitimate onboard Wi-Fi so it appeared broken. With the real network rendered useless, passengers were more likely to pick the fake one instead, believing it was simply another access point or a faster alternative.

Once connected, the fake network would likely have presented a captive portal login page. Instead of asking for booking details, this portal probably prompted users to sign in with credentials for another site, such as Google or Facebook, a classic credential harvesting move disguised as a routine Wi-Fi login step.

Why it succeeded

This attack works because open, public Wi-Fi networks cannot be authenticated by the end user. There is no cryptographic way for a passenger's device to verify that “Delta WiFi FAST” is actually operated by the airline, which makes creating a convincing look-alike network technically easy. Travelers are also conditioned by years of hotel, airport, and airline hotspots to expect a login or click-through portal before getting online, so an unexpected credential prompt does not necessarily raise suspicion in the moment.

What to watch for

• A Wi-Fi network name that is similar to, but not exactly, the official network provided by staff or signage.
• The legitimate network suddenly failing to connect or dropping out, pressuring travelers to try an alternative.
• A login page asking for personal account credentials, such as Google or Facebook, just to access what should be a simple internet connection.

How to build resistance

• Only join the exact Wi-Fi network name confirmed by airline staff or official signage, and avoid similarly named “fast” or “free” variants.
• Treat any captive portal as untrusted and avoid entering real account passwords to get online.
• Be suspicious if the official network suddenly stops working right as an alternative network appears.
• When possible, use cellular data or a trusted VPN instead of joining unfamiliar open hotspots, especially in high-traffic travel settings like airports, hotels, and airlines.

What was the “Delta WiFi FAST” attack?

A passenger on a Delta flight allegedly set up a fake Wi-Fi hotspot named “Delta WiFi FAST” to trick other passengers into connecting, likely to steer them to a fake login page.

How did the attacker get people to join the fake network?

The attacker reportedly tried to disrupt the legitimate in-flight Wi-Fi so it looked broken, pushing passengers toward the fake network as the only working option.

What was the attacker after?

The likely goal was credential harvesting, with the fake network prompting users to log in with accounts such as Google or Facebook to get online.

Why are public hotspots like airline or hotel Wi-Fi easy to spoof?

Open Wi-Fi networks can't be authenticated, so creating a look-alike network is easy, and users are already conditioned to click through captive portals without questioning them.