Rogue “Delta WiFi Fast” Network Disrupts Flight

Delta is investigating an onboard incident where an unauthorized Wi‑Fi network appeared on a flight and the crew shut off Wi‑Fi for about 30 minutes. Reports say a rogue network named “Delta WiFi Fast” may have been used to trick passengers into connecting and potentially entering credentials into a phishing-style login page.

Key findings

• An unauthorized Wi‑Fi network was detected onboard Delta Flight 591 (Las Vegas to Atlanta), and the crew disabled Wi‑Fi for about 30 minutes.
• Reports alleged a Wi‑Fi deauthentication attack disrupted access to the legitimate onboard network.
• A rogue SSID “Delta WiFi Fast” was reportedly broadcast, creating the potential for an evil-twin-style credential harvesting attempt.
• Third-party reports claimed a phishing page attempted to collect personal information and Google login credentials, but Delta has not confirmed credential theft.

Who’s being targeted

• Commonly targeted roles: All employees, Frequent travelers, Executives, Sales and customer-facing teams.
• Affected industries: Airlines / Transportation, Travel / Hospitality (public Wi‑Fi environments).
• Attack channels: physical, website.
• Impersonated: Delta onboard Wi‑Fi service.

Awareness takeaways

• Teach travelers not to trust Wi‑Fi names alone; verify the correct network with staff or official instructions before connecting.
• Warn users that captive portals asking for corporate or Google credentials can be a phishing attempt, use safer alternatives (cellular/VPN) for sensitive work.
• Prepare staff for “pressure moments” (outages/disruptions) where attackers rely on urgency to get clicks, connections, or logins.

Red flags to watch for

• A new/unknown Wi‑Fi name appears during an outage and looks “more official” or “faster”
• Unexpected login request (especially for Google credentials) just to use onboard Wi‑Fi
• Connectivity disruption that pressures users to pick any available network quickly