- University researchers have found a way to disseminate sensitive data from aeromaceous systems
- It is a question of installing malicious software on the computer and a smartwatch which accompanies it
- The attack is rather difficult to withdraw
Safety experts claim to have found a way to steal data sensitive to airbooks using smart watches.
Air computers are physically insulated from the wider internet and are not accessible remotely. They are generally used in high safety environments and critical infrastructure, to protect sensitive data and various operations.
University researchers led by MORDECHAI GURI, a specialist in the field of secret attack channels, have discovered a method that allows threat actors to exfiltrate connection identification information, encryption keys or cerebral vascular accidents.
Listen to secrets
The method, which they have named “ Smartattack ”, is delivered with a lot of warnings, but in theory, he sees a threat player finding a way to physically access the target computer, either to have someone (an employee without distrust or dissatisfied) to access and deploy a malicious software element.
This malicious software will first act as an infostaler, collecting precious information for exfiltration. Then he will use computer speakers to emit ultrasonic sounds, inaudible to the human ear, to the environment.
The sounds would be played in two frequencies – 18.5 kHz and 19.5 kHz. These two form the binary system, the first being zero and the second – that.
The last step is that the watch picks up the sounds. He must also have a special application installed, so he must either be compromised himself, or he must be carried by the attacker.
If it did not seem difficult enough, the watch must be confronted with the speakers and must be placed in a range between 6 and 9 meters of the speakers. The data transmission rate also varies between 5 and 50 bp, depending on the distance.
There are different ways to prevent smartattacks on aerodynamic systems, preventing people from wearing smart watches to suppression of computers’ speakers. Sounds could also work.
Via Bleeping Compompute
