Science & Tech · Cybersecurity · 3 hrs ago

Researchers demonstrate USB-based data theft from air-gapped computers

Researchers demonstrate USB-based data theft from air-gapped computers

Researchers at Korea University and 78ResearchLab demonstrated a way to extract data from air-gapped computers.

These systems are kept separate from networks to protect sensitive information, but an attacker must first gain root or administrator access to the target.

The method, called SPECTER, manipulates USB devices to create signals that could be detected through a phone’s charging status, a peripheral’s behavior or electromagnetic emissions.

Tests on Windows 10 and Ubuntu 22.04 sent data at 0.2 to 1 bit per second.

That is slow, but could expose small files such as credentials or cryptographic keys.

The activity may cause visible notifications or disrupt connected devices, so security teams are advised to monitor unusual USB power and device-state changes.

1 source

Related