Modified off-the-shelf drones have been found carrying wireless network-intrusion kit in a very unlikely place."During their investigation, they determined that the DJI Phantom drone had originally been used a few days prior to intercept a worker's credentials and Wi-Fi," Linares said."This was definitely a threat actor who likely did internal reconnaissance for several weeks, had physical proximity to the target environment, had a proper budget and knew their physical security limitations," he said.Sophos senior threat researcher Sean Gallagher told The Register said the attack described is something people have done "warwalking" with Wi-Fi Pineapples or the equivalent."Honestly, unless there's a very specific bit of targeting going on, this is very low on the threat modeling priority list for most organizations, especially when there are so many other ways to get network access without having a physical presence.""