I was thinking recently about the inverse of this attack. I have many thieves coming to my warehouse, and was thinking I could broadcast bunch of local ssids to try to see which ones their phones try to autoconnect to.
I could then use that info to figure out where they are likely to hang out, and either give it to police or take matters into my own hands.