FBI probes fake Wi-Fi network on Delta flight 591

The Federal Bureau of Investigation is examining reports that an unauthorized Wi-Fi network was set up aboard a Delta Air Lines flight, prompting the crew to temporarily disable internet access. The incident was reported on Monday on flight 591 traveling from Las Vegas to Atlanta, according to officials and the airline.

Reports said passengers created a fraudulent hotspot commonly described as an “evil twin” network, which can imitate a legitimate service to trick users into connecting. The landing page tied to the hotspot was described as a phishing page aimed at collecting login credentials from other travelers, including passengers returning from the DEF CON security conference.

How the incident surfaced during the flight

The first public details were shared via social media accounts that track Aircraft Communications Addressing and Reporting System (ACARS) messages. Those posts referenced a pilot transmission indicating that passengers linked to the cyber conference were able to jam the onboard Wi-Fi and then broadcast their own signal.

Delta said the unauthorized network was present only briefly. The airline also said the network was not provided, operated, or supplied by Delta.

Delta says aircraft systems were not affected

Delta spokesperson Morgan Durrant confirmed the appearance of the fraudulent hotspot and said the airline treated the issue as a connectivity event rather than a flight-safety problem. Delta said the aircraft’s operating systems remained secure and that safety was never in question.

The Federal Bureau

As a precaution, the crew deactivated the actual onboard Wi-Fi system for 30 minutes. Delta said no emergency procedures were activated during the incident.

FBI Atlanta coordinating with partners

After the plane arrived, the Atlanta Police Department directed questions about the matter to federal authorities. FBI Atlanta spokesperson Tony Thomas said the bureau is aware of reports describing a possible Wi-Fi-related incident and is working with local and corporate partners.

Officials said no arrests have been made and that agents did not meet the aircraft at the gate. Authorities have not publicly detailed whether any passenger accounts were compromised, and they have not described the scope of any potential credential collection.

Why public-access Wi-Fi remains a target

The episode has drawn attention to the risks tied to public-access wireless networks, particularly in confined environments where many users may attempt to connect quickly. Officials are continuing to assess what occurred during the brief period when the fraudulent hotspot was reportedly active and whether any data exposure resulted.