Researchers at the Ben-Gurion University of the Negev (BGU) Cyber Security Research Center have discovered that virtually any cellphone infected with a malicious code can use GSM phone frequencies to steal critical information from infected “air-gapped” computers.
Air-gapped computers are isolated — separated both logically and physically from public networks — ostensibly so that they cannot be hacked over the Internet or within company networks.
Led by BGU Ph.D. student Mordechai Guri, the research team discovered how to turn an ordinary air-gapped computer into a cellular transmitting antenna using software that modifies the CPU firmware. GSMem malicious software uses the electromagnetic waves from phones to receive and exfiltrate small bits of data, such as security keys and passwords.
Click here to watch a video of the demonstration.
“GSMem takes the air out of the gap and will force the world to rethink air-gap security,” says
Dudu Mimran, chief technology officer of BGU’s Cyber Security Research Center. “Our GSMem malicious software on Windows and Linux has a tiny computational footprint, which makes it very hard to detect. Furthermore, with a dedicated receiver, we were successful exfiltrating data as far as 90 ft. (30 meters) in distance from the computer.”
According to Guri, “Many companies already restrict the use of cell phones or limit the capabilities (no camera, video or Wi-Fi on cell phones) around air-gapped computers. However, phones are often otherwise allowed in the vicinity of air-gapped computers thought to be secure. Since modern computers emit some electromagnetic radiation (EMR) at various wavelengths and strengths, and cellular phones easily receive them, this creates an opportunity for attackers.”
The researchers recommend that countermeasures to mitigate the issue use the “Zone” approach: defined areas or zones around these computers where mobile phones and simple devices are prohibited. Insulation of partition walls may help to mitigate signal reception distance growth if a dedicated hardware receiver is used. Additionally, anomaly detection and behavioral dynamic analysis may help.
Read more: Cellphones Can Steal Data from Computers
The Latest on: Air gapped computers
[google_news title=”” keyword=”Air gapped computers” num_posts=”10″ blurb_length=”0″ show_thumb=”left”]
via Google News
The Latest on: Air gapped computers
- Cutting the cord: Can Air-Gapping protect your data?on May 13, 2024 at 8:57 am
Isolating hardware from the internet deters hackers, but at a huge cost. Charles Orton-Jones investigates the tactic of Air-Gapping ...
- Fooled by AI? These firms sell deepfake detection that’s ‘REAL 100%.’on May 12, 2024 at 3:50 pm
A surge of companies now claim to offer hyper-accurate detection services, but their capabilities are largely untested.
- Apple Pencil Pro and new iPads are a warning shot at Wacomon May 10, 2024 at 8:54 am
Apple's new Apple Pencil Pro has two new features that make it a must-have for artists — but is it enough to dethrone Wacom?
- Microsoft’s ‘air gapped’ AI is a bot set up to process top-secret infoon May 8, 2024 at 8:31 pm
Chappell announced the AI supercomputer on Tuesday afternoon at the “first-ever AI Expo for National Competitiveness” in Washington D.C. Unlike the models behind ChatGPT or other tools, Microsoft says ...
- MacBook Air M3 13-inch vs. iPad Pro M4: Is Apple's new tablet more powerful?on May 8, 2024 at 9:00 am
Apple's new iPad Pro features an M4 chip, but does that make it more powerful than the company's new MacBook Air M3 13-inch?
- Microsoft made an AI model for spies that's not connected to the interneton May 8, 2024 at 3:36 am
William Chappell, its strategic missions and technology CTO, told Bloomberg that Microsoft spent 18 months working on the model, which is "air-gapped" so it's secure and can only be accessed by ...
- Microsoft launches AI chatbot for spieson May 7, 2024 at 12:22 pm
GPT-4 can power AI assistants that converse in a human-like manner. Microsoft has a license to use the technology as part of a deal in exchange for large investments it has made in OpenAI. According ...
- New iPad Pros are the thinnest Apple device ever, feature dual-OLED screenson May 7, 2024 at 7:25 am
Apple's newest iPad Pro, available TK, puts an M TK chip inside a thinner frame available in new 11-inch and 13-inch and sizes, while also upgrading the screens on both to two "tandem" OLED displays ...
- Hackers can steal data by messing with a computer's processoron May 7, 2024 at 6:23 am
Software that has been blocked from connecting to the internet should be secure from hacking attempts, but now researchers have found a way to sneak data out by varying the speed of the computer's pro ...
- Microsoft deploys air-gapped AI for classified defense, intelligence customerson May 7, 2024 at 5:59 am
Microsoft will announce later today the availability of GPT-4 in the Azure Government Top Secret cloud. The tech giant has been working for about 18 months on this effort, which includes the ...
via Bing News