Delta is investigating an onboard incident where an unauthorized Wi‑Fi network appeared on a flight and the crew shut off Wi‑Fi for about 30 minutes. Reports say a rogue network named “Delta WiFi Fast” may have been used to trick passengers into connecting and potentially entering credentials into a phishing-style login page.
Key findings
- An unauthorized Wi‑Fi network was detected onboard Delta Flight 591 (Las Vegas to Atlanta), and the crew disabled Wi‑Fi for about 30 minutes.
- Reports alleged a Wi‑Fi deauthentication attack disrupted access to the legitimate onboard network.
- A rogue SSID “Delta WiFi Fast” was reportedly broadcast, creating the potential for an evil-twin-style credential harvesting attempt.
- Third-party reports claimed a phishing page attempted to collect personal information and Google login credentials, but Delta has not confirmed credential theft.
Who’s being targeted
- Commonly targeted roles: All employees, Frequent travelers, Executives, Sales and customer-facing teams.
- Affected industries: Airlines / Transportation, Travel / Hospitality (public Wi‑Fi environments).
- Attack channels: physical, website.
- Impersonated: Delta onboard Wi‑Fi service.
Awareness takeaways
- Teach travelers not to trust Wi‑Fi names alone; verify the correct network with staff or official instructions before connecting.
- Warn users that captive portals asking for corporate or Google credentials can be a phishing attempt, use safer alternatives (cellular/VPN) for sensitive work.
- Prepare staff for “pressure moments” (outages/disruptions) where attackers rely on urgency to get clicks, connections, or logins.
Red flags to watch for
- A new/unknown Wi‑Fi name appears during an outage and looks “more official” or “faster”
- Unexpected login request (especially for Google credentials) just to use onboard Wi‑Fi
- Connectivity disruption that pressures users to pick any available network quickly
Read the video transcript
You’re on a Delta flight, Wi‑Fi dies, and suddenly a new network pops up: “Delta WiFi Fast.” Looks legit, right? On Delta Flight 591, reports say someone broadcast that exact rogue network and may have used an evil‑twin setup to show a fake login page and grab Google credentials. Here’s the trick: Wi‑Fi cuts out, pressure goes up, and a new network name appears that sounds more official and faster. You tap it, see a portal, and it suddenly wants your personal info or Google login just to get online. When Wi‑Fi flakes out in public places, don’t trust the name. Before you connect, confirm the exact network with staff, or skip it and use cellular or VPN for anything sensitive.