Security Alerts
Fingbox continuously monitors your network looking for suspicious events. Every time that
something is detected, it will send you an alert and record the event in the recent events journal
accessible from the Dashboard. Here is a list of events generating security alerts, the Fing team
is at work to add more coverage every time that we learn of a new type of attack or security
threat.
New device found (MAC address never seen before)
A new device has joined your network. You have the choice to acknowledge or block the device.
It’s good practice to name and assign any new device as soon as they join the network.
New or malicious Wi-Fi Access Point
A new Wi-Fi access point is using your Wi-Fi network name (SSID) but with a BSSID that has
never been seen before.
If it’s a new Access Point you just replaced or added to your home, you can acknowledge
this message: open the Recent Events screen and tap on this event.
If you just installed Fingbox, this can happen as Fingbox learns the BSSIDs over time. If you
have multiple access points and multiple Wi-Fi names on the same network, you can speed
up this learning process. For each Wi-Fi network, connect your phone to Wi-Fi and run a manual
scan from the Devices screen; Fingbox will notice you’re in the same LAN and will add the
BSSID to the list.
If you have multiple access points advertising the same Wi-Fi name, turn off Wi-Fi on your
phone, go very close to an access point and turn on the Wi-Fi; usually it will connect to the
closest access point. Run a manual scan and Fingbox will learn the BSSID.
If you’re not in any of the above situations, then a malicious wireless access may have been
installed near your network without authorization, with the intent of inducing your devices to
connect and try to steal your data.
In this case, shut down your network and change the Wi-Fi password immediately. Make sure
you’re using WPA2-only with AES or CCMP encryption (no WEP, no WPA, no mixed
WPA/WPA2, no TKIP) and the password is 16 character long and look as random as possible
(don’t use pets or people's names, birth dates or anything that is connected to your personal
life).
Fingbox User’s Guide - App v6.2.1 Page 49