Attackers often use so-called fake hotspots that pose as trustworthy networks to steal passwords