DEF CON attendees suspected in fake Wi-Fi attack on Delta flight
Original: DEF CON crowd suspected in fake-hotspot attack on Delta flight
Why This Matters
The case highlights physical security risks posed by sophisticated attackers in shared transportation environments.
On August 11, 2026, passengers on Delta Flight 591 from Las Vegas to Atlanta allegedly deployed a fake Wi-Fi hotspot called 'Delta WiFi Fast' with a phishing page to steal credentials. The incident occurred the day after DEF CON concluded. FBI Atlanta confirmed it is investigating.
On August 11, 2026, Delta Flight 591 traveling from Las Vegas to Atlanta became the subject of a federal investigation after passengers allegedly set up an unauthorized Wi-Fi hotspot onboard. The incident occurred one day after DEF CON, a major cybersecurity conference, concluded in Las Vegas — leading investigators to suspect conference attendees were involved.
Pilots reportedly sent an ACARS message stating passengers from a cyber conference had jammed the aircraft's Wi-Fi and broadcast their own signal. A Reddit post described the attackers creating a fake hotspot named 'Delta WiFi Fast,' complete with a phishing landing page designed to harvest passengers' login credentials — a technique known as an 'evil twin' attack.
Delta spokesperson Morgan Durrant confirmed to Ars Technica that 'an unauthorized WiFi network, which was not provided, operated, or supplied by Delta, was present onboard the aircraft for a short time during the flight.' Delta stated the flight's safety was never in question, no aircraft operating systems were affected, and no emergency was declared. The legitimate onboard Wi-Fi was disabled for approximately 30 minutes.
FBI Atlanta spokesperson Tony Thomas confirmed the bureau is 'aware of reports regarding a potential Wi-Fi-related incident involving Delta Flight 591' and is in contact with local and corporate partners. No arrests have been made, and FBI agents did not meet the aircraft at the gate.