NewsPublished 11 Aug 2026

Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees

Source Bleeping Computer

Description

Delta Air Lines Flight 591 from Las Vegas to Atlanta experienced an unauthorized Wi-Fi network and a Wi-Fi deauthentication attack during the flight. Passengers who had attended the DEF CON 34 hacker conference allegedly conducted the attack, which involved jamming the aircraft's Wi-Fi and broadcasting a rogue network named "Delta WiFi Fast." The rogue network displayed a phishing page designed to collect personal credentials and Google login data. The aircraft crew disabled Wi-Fi for about 30 minutes to mitigate the disruption. Federal authorities investigated the incident after landing, questioning suspects and seizing their Wi-Fi hardware. Delta confirmed no safety impact to passengers or aircraft systems and is cooperating with law enforcement and aviation regulators.

Impact

The attack caused a denial-of-service condition on the aircraft's Wi-Fi network, disrupting connectivity for passengers. Additionally, the rogue Wi-Fi network attempted to phish personal and Google login credentials from passengers. There was no reported impact on the safety of passengers or aircraft operational systems. The incident required disabling Wi-Fi temporarily and prompted a law enforcement investigation. The phishing attempt could have led to credential compromise if passengers connected to the rogue network and submitted their information.

Defensive guidance

Delta Air Lines disabled the aircraft's Wi-Fi functionality temporarily to stop the attack. The company is cooperating with federal law enforcement and aviation regulators to investigate the incident. Networks can mitigate Wi-Fi deauthentication attacks by implementing Protected Management Frames (PMF), though it is unclear if this was in place. Passengers should avoid connecting to unauthorized or suspicious Wi-Fi networks and be cautious of phishing pages requesting credentials.

Summary

During Delta Air Lines Flight 591, an unauthorized Wi-Fi network appeared onboard, and a Wi-Fi deauthentication attack was conducted, reportedly by passengers returning from DEF CON 34. The attack involved sending forged deauthentication frames to disconnect clients from the legitimate in-flight Wi-Fi access point, causing denial of service. Concurrently, a rogue Wi-Fi network named "Delta WiFi Fast" was broadcast, presenting a phishing page to collect sensitive credentials. The aircraft crew responded by disabling Wi-Fi for approximately 30 minutes. Federal authorities boarded the aircraft post-landing to investigate and confiscate equipment. Delta stated the incident did not affect flight safety or aircraft systems and is under thorough investigation with federal and aviation partners.

References

bleepingcomputer.com/news/security/delta-probes-wi-fi-deauth-attack-on-flight-carrying-def-con-attendees/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 11 Aug 2026, 18:41 UTC

References

Community reviews