Researchers at the Ben-Gurion University of the Negev (BGU) Cyber Security Research Center have discovered that virtually any cellphone infected with a malicious code can use GSM phone frequencies to steal critical information from infected “air-gapped” computers.
Air-gapped computers are isolated — separated both logically and physically from public networks — ostensibly so that they cannot be hacked over the Internet or within company networks.
Led by BGU Ph.D. student Mordechai Guri, the research team discovered how to turn an ordinary air-gapped computer into a cellular transmitting antenna using software that modifies the CPU firmware. GSMem malicious software uses the electromagnetic waves from phones to receive and exfiltrate small bits of data, such as security keys and passwords.
Click here to watch a video of the demonstration.
“GSMem takes the air out of the gap and will force the world to rethink air-gap security,” says
Dudu Mimran, chief technology officer of BGU’s Cyber Security Research Center. “Our GSMem malicious software on Windows and Linux has a tiny computational footprint, which makes it very hard to detect. Furthermore, with a dedicated receiver, we were successful exfiltrating data as far as 90 ft. (30 meters) in distance from the computer.”
According to Guri, “Many companies already restrict the use of cell phones or limit the capabilities (no camera, video or Wi-Fi on cell phones) around air-gapped computers. However, phones are often otherwise allowed in the vicinity of air-gapped computers thought to be secure. Since modern computers emit some electromagnetic radiation (EMR) at various wavelengths and strengths, and cellular phones easily receive them, this creates an opportunity for attackers.”
The researchers recommend that countermeasures to mitigate the issue use the “Zone” approach: defined areas or zones around these computers where mobile phones and simple devices are prohibited. Insulation of partition walls may help to mitigate signal reception distance growth if a dedicated hardware receiver is used. Additionally, anomaly detection and behavioral dynamic analysis may help.
Read more: Cellphones Can Steal Data from Computers
The Latest on: Air gapped computers
via Google News
The Latest on: Air gapped computers
- Apple Enhances HomeKit with Sensor-Based Automations and Timed Turn Offson June 29, 2022 at 7:55 am
Over the years, Apple has quietly enhanced Home automations to take advantage of more sensors and let you automatically turn off automations. “Take Control of Apple Home Automation” author Josh ...
- HENSOLDT jamming system proves effectiveness against radars of various typeson June 29, 2022 at 1:48 am
Sensor solution provider HENSOLDT has completed extensive ground and field tests with its "Kalaetron Attack" jamming system, confirming its effectiveness against enemy air defence radars of various ...
- Cathay Pacific back on hiring spree in anticipation of take-off in global air travelon June 27, 2022 at 5:37 am
When Jasmine Lau received an email from Cathay Pacific Airways last month asking if she wanted to return to her old job as a flight attendant, she contemplated the proposition, but eventually decided ...
- "Top Gun" or topped out? Missouri-made fighter jets are falling out of military's favor.on June 25, 2022 at 7:49 pm
Those tweaks have been “mostly internal,” with focuses on sensors, computers and electronics, said Mike Hankins, the Smithsonian Air and Space museum’s ... “We’re trying to meet that gap and get us to ...
- Virtual Lightning: Behind the Wheel in Ford’s New Multi-Million Dollar Simulatoron June 24, 2022 at 9:45 am
Ford has already used its simulators to help develop the Ford Mustang Mach-E, the Ford Maverick, and the Ford F-150 Lightning full-size electric pickup truck.
- Video gives rare glimpse of weather balloon exploding 20 miles above Earthon June 22, 2022 at 8:25 am
Have you ever seen a weather balloon pop? Most people never will, because the balloons can rise upwards of 20 miles into the atmosphere. However, amateur astronomer Michael Riffle pointed his lens to ...
- Too hot to sleep? 7 ways to keep a bedroom cool in a heatwaveon June 22, 2022 at 4:00 am
With warmer nights settling in, getting a good night’s sleep can become a common problem for many of us, but how do you keep a bedroom cool in a heatwave?Leaving the window open isn’t always an option ...
- In Russia, Western Planes Are Falling Aparton June 22, 2022 at 12:00 am
After months of sanctions that have made critical repair parts difficult to access, aircraft operators are running out of options.
- The iPad Air convinced me that the post-PC world is almost hereon June 20, 2022 at 12:32 pm
I've been using the iPad Air as a replacement for my Macbook Pro, and it convinced me that the post-computer world is closer than we think.
- Compared: M2 MacBook Air vs Surface Laptop Go 2on June 20, 2022 at 10:26 am
Surface Laptop Go 2; Starting Price: $1,199 Compare M2 MacBook Air prices: $599.99 Available at the Microsoft Store: Dimensions (inches) 11.9 ...
via Bing News