Cybersecurity expert Sergey Zolotukhin has issued a strong warning to users regarding the significant threats associated with using free public Wi-Fi networks. He emphasizes that cybercriminals are actively exploiting these networks to intercept user sessions and gain unauthorized access to sensitive personal data.
Zolotukhin categorically advises against connecting to public free Wi-Fi access points altogether. Should there be absolutely no other option, he recommends limiting connections exclusively to verified networks, such as those provided by hotels or cafes where legitimate login credentials are supplied by the staff. Crucially, he stresses the importance of never transmitting any confidential information – including service login details or making credit card payments – when connected to such public networks.
The expert further highlighted a growing danger: malicious actors are increasingly creating sophisticated fake access points. These fraudulent networks are designed to mimic legitimate Wi-Fi services found in prominent public locations, including large shopping centers, train stations, airports, cafes, and gas stations.
A common vulnerability arises when smartphones are configured for automatic connection to previously encountered Wi-Fi networks. This setting can inadvertently lead a device to join one of these deceptive access points without the user`s knowledge. Zolotukhin strongly recommends disabling the automatic Wi-Fi connection feature. He warns that if a device connects to such a “malicious twin” network, cybercriminals could immediately gain full access to all data transmitted or received by the user`s smartphone.
According to Zolotukhin, this vulnerability could lead to serious breaches, including the exposure of browsing history, private conversations, and critically, usernames and passwords for various online services. He specifically cited the potential for a user`s messenger account to be stolen as a direct consequence of such an attack.
Reinforcing these warnings, the Russian Ministry of Internal Affairs had previously cautioned citizens about the severe repercussions of social media account breaches. The ministry noted that stolen confidential information from such incidents is frequently leveraged for subsequent, more targeted cyberattacks.

