An evil-twin attack is a type of wireless network security attack in which an attacker sets up a fake wireless access point (WAP) that has the same name and security settings as a legitimate WAP.
When users attempt to connect to the legitimate WAP, they may unknowingly connect to the fake WAP instead, which allows the attacker to intercept and potentially modify their network traffic.
This type of attack is particularly likely to be successful in areas where there are multiple WAPs, such as in the section of the building closest to the parking lot, where users may be returning to their desks after using their devices elsewhere in the building. The intermittent slow speeds and inability to connect to network drives, as well as the reports of users being required to re-enter their credentials on web pages, are all symptoms of an evil-twin attack.