Researchers at the Ben-Gurion University of the Negev (BGU) Cyber Security Research Center have discovered that virtually any cellphone infected with a malicious code can use GSM phone frequencies to steal critical information from infected “air-gapped” computers.
Air-gapped computers are isolated — separated both logically and physically from public networks — ostensibly so that they cannot be hacked over the Internet or within company networks.
Led by BGU Ph.D. student Mordechai Guri, the research team discovered how to turn an ordinary air-gapped computer into a cellular transmitting antenna using software that modifies the CPU firmware. GSMem malicious software uses the electromagnetic waves from phones to receive and exfiltrate small bits of data, such as security keys and passwords.
Click here to watch a video of the demonstration.
“GSMem takes the air out of the gap and will force the world to rethink air-gap security,” says
Dudu Mimran, chief technology officer of BGU’s Cyber Security Research Center. “Our GSMem malicious software on Windows and Linux has a tiny computational footprint, which makes it very hard to detect. Furthermore, with a dedicated receiver, we were successful exfiltrating data as far as 90 ft. (30 meters) in distance from the computer.”
According to Guri, “Many companies already restrict the use of cell phones or limit the capabilities (no camera, video or Wi-Fi on cell phones) around air-gapped computers. However, phones are often otherwise allowed in the vicinity of air-gapped computers thought to be secure. Since modern computers emit some electromagnetic radiation (EMR) at various wavelengths and strengths, and cellular phones easily receive them, this creates an opportunity for attackers.”
The researchers recommend that countermeasures to mitigate the issue use the “Zone” approach: defined areas or zones around these computers where mobile phones and simple devices are prohibited. Insulation of partition walls may help to mitigate signal reception distance growth if a dedicated hardware receiver is used. Additionally, anomaly detection and behavioral dynamic analysis may help.
Read more: Cellphones Can Steal Data from Computers
The Latest on: Air gapped computers
via Google News
The Latest on: Air gapped computers
- 68 Clever Solutions To Your Dumb Problemson October 10, 2020 at 7:56 pm
That storage rack is just one of many clever products on Amazon that can help you solve whatever dumb problems are plaguing you. Since pesky problems often call for clever solutions, this list has ...
- Buying iPhone 12? Make cash on your old device, and other tipson October 10, 2020 at 3:35 am
According to Decluttr, current iPhone models are estimated to drop 15% in value, on average, within the first month of the iPhone 12 launch.
- Podcast: Boeing 737 MAX Return Nears As 787 Bids Adieu To Seattleon October 9, 2020 at 3:13 am
First, more than 16 months after it was grounded, the Boeing 737 MAX is closing in on winning regulatory approval in the U.S. and Europe to re-enter service. Aviation Week editors Sean Broderick and ...
- Hurricane Delta has western Louisiana in its crosshairson October 8, 2020 at 11:03 am
Hurricane Delta was intensifying over the warm waters of the Gulf of Mexico early Thursday afternoon. It is expected to turn north on Thursday night and make landfall in western Louisiana on Friday ...
- Slingshot Aerospace & Leading Hollywood Visualization Studio THE THIRD FLOOR Reimagine Next-Gen Space Trainingon October 8, 2020 at 5:13 am
Slingshot Aerospace announced today that it has received $2 million to develop the Slingshot Orbital Laboratory for the U.S. Space Force.
- Lakewood Public Library addressing computer access, adding Saturday hourson October 7, 2020 at 9:31 am
More than two months after reopening its doors and offering in-person services at its Main Library and Madison Branch, Lakewood Public Library has yet to allow members back into its technology center ...
- Alamogordo Public Library still operating despite COVID-19on October 7, 2020 at 8:58 am
The Alamogordo Public Library is usually busy with people of all ages coming in and out with books, DVDs, using the computers, taking genealogy courses or partaking of the free air conditioning and Wi ...
- The 10 Best Webcams (Updated 2020)on October 5, 2020 at 6:14 am
In the market for a good webcam? With so many available, it’s hard to identify the cream of the crop, so here are the best webcams to get in 2020.
- The new iPad Air makes Apple’s tablet lineup messier by outshining the iPad Proon October 3, 2020 at 2:46 pm
Apple favors simplicity, and nowhere is that more apparent — other than product design — than in the company’s product lineups. But the newly announced iPad ...
- Roanoke Valley organizations try to fill child care gap as students remain out of the classroomon September 30, 2020 at 4:00 pm
Nonprofits, private day care centers and churches have partnered together to offer all day child care for school age children.
via Bing News