An evil twin is a type of rogue access point that mimics a legitimate one by using the same SSID, encryption, and authentication settings.
An attacker can set up an evil twin near a corporate network and trick users into connecting to it instead of the real one.
Once connected, the attacker can intercept the user's network traffic, capture their credentials, and launch other attacks such as phishing, malware injection, or man-in-the-middle.
To prevent evil twin attacks, network administrators should use strong encryption and authentication methods, such as WPA2-Enterprise with 802.1x, and monitor the wireless spectrum for any unauthorized access points. Reference:
CompTIA Network+ N10-008 Exam Common Attack Types Quiz
Rogue Access Points and Evil Twins - SY0-601 CompTIA Security+ : 1.4 - Professor Messer IT Certification Training Courses CompTIA Network+ (N10-008) Practice Test Questions