A rogue access point is an unauthorized or compromised wireless access point connected to a network or placed near users without approval. It may be installed by an attacker, by a careless employee, or by a compromised device, and it can impersonate a legitimate Wi-Fi network or quietly relay traffic. Because users often connect based on signal strength and familiar names, a rogue AP can become a trusted-looking path into the local network.
In cyber security, rogue access points matter because they can intercept, redirect, or observe traffic and create an entry point for man-in-the-middle attacks, DNS manipulation, credential theft, and session hijacking. They are especially dangerous on guest Wi-Fi, conferences, hotels, and other public spaces where many devices connect quickly and assumptions about trust are weak. Defenders look for them with wireless intrusion detection and prevention systems, radio surveys, SSID baselines, and strong network access controls that block unauthorized hardware and alert on suspicious bridging or duplicate network names.