Researchers at the Ben-Gurion University of the Negev (BGU) Cyber Security Research Center have discovered that virtually any cellphone infected with a malicious code can use GSM phone frequencies to steal critical information from infected “air-gapped” computers.
Air-gapped computers are isolated — separated both logically and physically from public networks — ostensibly so that they cannot be hacked over the Internet or within company networks.
Led by BGU Ph.D. student Mordechai Guri, the research team discovered how to turn an ordinary air-gapped computer into a cellular transmitting antenna using software that modifies the CPU firmware. GSMem malicious software uses the electromagnetic waves from phones to receive and exfiltrate small bits of data, such as security keys and passwords.
Click here to watch a video of the demonstration.
“GSMem takes the air out of the gap and will force the world to rethink air-gap security,” says
Dudu Mimran, chief technology officer of BGU’s Cyber Security Research Center. “Our GSMem malicious software on Windows and Linux has a tiny computational footprint, which makes it very hard to detect. Furthermore, with a dedicated receiver, we were successful exfiltrating data as far as 90 ft. (30 meters) in distance from the computer.”
According to Guri, “Many companies already restrict the use of cell phones or limit the capabilities (no camera, video or Wi-Fi on cell phones) around air-gapped computers. However, phones are often otherwise allowed in the vicinity of air-gapped computers thought to be secure. Since modern computers emit some electromagnetic radiation (EMR) at various wavelengths and strengths, and cellular phones easily receive them, this creates an opportunity for attackers.”
The researchers recommend that countermeasures to mitigate the issue use the “Zone” approach: defined areas or zones around these computers where mobile phones and simple devices are prohibited. Insulation of partition walls may help to mitigate signal reception distance growth if a dedicated hardware receiver is used. Additionally, anomaly detection and behavioral dynamic analysis may help.
Read more: Cellphones Can Steal Data from Computers
The Latest on: Air gapped computers
via Google News
The Latest on: Air gapped computers
- International Air Academy welcomes new leaderon March 6, 2021 at 2:20 pm
The International Air and Hospitality Academy in Vancouver changed its leadership last week as the school is adapting to declining demand for airline training and a surging interest in wind turbine in ...
- Academy math instructors teach new approach to calculuson March 5, 2021 at 7:45 am
Math teachers at the Air Force Academy are modernizing one of every freshman college students’ greatest fears: calculus.
- How a decline in community college students is a big problem for the economyon March 5, 2021 at 6:04 am
It’s a big concern for us. And it’s going to get worse because of the way these numbers are going.” Griffin is talking about the steep decline in enrollment at community colleges, which help train ...
- Worldwide continuous gap-filled MODIS land surface temperature dataseton March 4, 2021 at 6:33 pm
Measurement(s) temperature of air • land surface temperature Technology Type(s) satellite imaging of a planet • computational modeling technique Factor Type(s) year of data collection • daytime and ni ...
- Thin explosive films provide snapshot of how detonations starton March 4, 2021 at 7:03 am
Using thin films—no more than a few pieces of notebook paper thick—of a common explosive chemical, researchers from Sandia National Laboratories studied how small-scale explosions start and grow.
- E.W. Scripps Company (SSP) Q4 2020 Earnings Call Transcripton March 3, 2021 at 7:53 am
Q4 2020 Earnings Call Feb 26, 2021, 9:30 a.m. ET Ladies and gentlemen, thank you for standing by, and welcome to the Scripps earnings call. [Operator Instructions] [Operator Instructions] I would now ...
- Drones With ‘Most Advanced AI Ever’ Coming Soon To Your Local Police Departmenton March 3, 2021 at 3:30 am
Founded by Google veterans and backed by $340 million from major VCs, Skydio is creating drones that seem straight out of science fiction—and they could be flying around your neighborhood soon.
- The U.S. Air Force Is Very Worried About China and Russia's Military Poweron March 2, 2021 at 10:03 pm
Speaking to an audience at the 2021 Air Force Association symposium, Brown emphasized his well known “change or lose” guidance to his force, an idea grounded in the pointed recognition that Russia and ...
- Best accessories for M1 MacBook Air/Proon March 2, 2021 at 3:22 am
If you purchased a MacBook recently and looking for MacBook accessories for your M1 MacBook Air/Pro, here are the best picks from Amazon.
- Honeywell And Syracuse University Establish Research Partnership To Develop Next-Generation Air Quality Technologyon March 1, 2021 at 5:00 am
Honeywell today announced it has established a research partnership with Syracuse University to fund research on emerging indoor air quality technologies. The partnership will include the naming of a ...
via Bing News