1. Find some one to steal a key from but which I don't care about.
2. Locate a third person that I want to target and move close to them in non office hours.
3. Create a clone of their wifi and try to spoof some website. Hopefully I can be close enough to their device that it would join my clone instead of their other preferred networks.
At step 2 seems like a better idea to move close to the office and start probing around?
To get that close to the office would be very obvious. You'd have to loiter all day or set up a remote host with some power.
To get near a target in the wild isn't that hard, especially if you know where they like to go on a regular basis.
It's lot easier than a lot of other methods, especially for a high level target like a C-level exec who might have access to bank accounts with millions of dollars and like to work at a local coffee shop on weekends.
