How can I solve this hacking issue

If you think this is an [OFFTOPIC] question it’s fine because it is not related to mikrotik and I also think so. I posted this here as a doubt and there is no problem if I get no answers. Won’t get upset or so.

Recently I have been facing problems with my internet service. I have a wireless router to provide internet to other users in my network getting this internet from an ISP (ADSL). Clients have been complaining about Internet lost. After cracking my head in pieces find out that this was because a spoofing attack. Someone have been using my router’s MAC address and using the same SSID to confuse users’s devices and somehow make a conflict when packets trying to get Internet. Being honest I don’t know how to stop this because both my router and the hacker’s device are broadcasting to the air and I can’t figure out how to say client’s devices which signal receive (tecnically both are the same). I could change my router’s MAC address and change SSID but this won’t solve the problem once the hacker finds out about my new settings. It’s a matter of time and this is not a solution at all. Im talking about a “semi-public” place so I can’t start chasing anyone with a laptop or a phone xDD. If you get this far thanks for reading! :slight_smile: :slight_smile:

PS: I find this as a serious problem in wireless connection-type. This means everyone can hack your network without having a deep knowledge about computing. Read some tutorials and done.

Read about 802.11w?

While I am no expert on this at all, here’s what comes to mind.

First I would doublecheck my own equipment for misconfigurations or counterfeit products.
There’s always a slight chance of having one AP misconfigured or dealing with fake products that all have the same MAC address.

Then I’d change my WiFi SSIDs and MACs to something different and try to capture/log some evidence from the rogue equipment. Maybe it is also trying to actively disrupt WiFi traffic with something like a deauth flood, etc.

After that my best bet would be to try and triangulate the rogue AP. Keep in mind that you are not specifically looking for a laptop. A cheap TP-Link with OpenWRT, something like those WiFi Pineapple devices, Raspberry Pi, and so on could also do the job.

Again, I am no expert, maybe there are other, better or more correct ways to deal with this :slight_smile: