An 'evil twin' attack takes place when a hacker creates a fake copy of a legitimate Wi-Fi network using a smartphone or other internet-capable device. Once a user connects to such a network, all the data they share with the network passes through a server controlled by the attacker. Hackers often target public Wi-Fi networks to conduct 'evil twin' attacks.