Did You Know?



Reply
Frequent Voice
tempnexus
Posts: 63
Registered: ‎10-10-2013

Interesting Air gap protected infection mechanism IF IF true and not a hoax.

Please use plain text.
TripleHelix
Posts: 5,383
Topics: 401
Kudos: 3,268
Ideas: 5
Registered: ‎02-03-2012

Re: Interesting Air gap protected infection mechanism IF IF true and not a hoax.

That is interesting Thanks for posting!

 

Daniel

coollogo_com-133794099.gif


asapvip.png   SigSVIP.png    Sr.Expert Advisor Jan 23 2014.png


Webroot® SecureAnywhere™ Internet Security Complete 2014 Beta Tester v8.0.4.70 on my main system Windows 7 Ultimate 64bit & on Win XP 32bit, Win Vista 32bit, Win 7 32bit, Win 8.1 Pro 32bit & 64bit all on VM's. 


MVP.gif.pngMicrosoft® MVP Consumer Security 2012/15


New to the Community? Register now and start posting!

Please use plain text.
cohbraz
Posts: 646
Registered: ‎08-06-2012

Re: Interesting Air gap protected infection mechanism IF IF true and not a hoax.

I do not know what to make of this. I have seen posts saying it is a hoax, and posts claiming it is very real.

It makes for interesting reading though, no matter what.
___________________________________________________________
Corey B.
Protected by Webroot


Please use plain text.
Moderator
Rakanisheu
Posts: 690
Registered: ‎03-13-2013

Re: Interesting Air gap protected infection mechanism IF IF true and not a hoax.

I personally think its a hoax but I am waiting to see. I have a few questions

 

1) BIOS are pretty unique, those of us who has flashed BIOS`s know it can be tricky. Get it wrong and the system is toast

2) If they say it spreads via High Freq sound waves the receiving PC will have to have some sort of DSP or a hardware decoding chip to recieve the sound (since the PC is powered off the CPU wont be utilised I am guessing??)

3) if thats not the case the recieving PC will already had to be infected to recieve the infection otherwise how is it listening??

4) the article mentions a USB stick??

 

I have done a thesis on transmitting data by hiding it in high frequency noise and you need specific hardware or decoding on the receving end. If it is true I will be very interested in the full story

Please use plain text.
explanoit
Posts: 842
Topics: 58
Kudos: 492
Ideas: 51
Registered: ‎01-11-2013

Re: Interesting Air gap protected infection mechanism IF IF true and not a hoax.

[ Edited ]

Hi @Rakanisheu 

The initial media reports were misleading. The infection is spread through some sort of USB 0day. It then uses sound to establish a data session between the computers to exfiltrate data from airgapped system.

----------------------------------------
Business Products Sr. Community Leader and Expert Advisor - WSA-Enterprise and WSAWSS administrator of 1400+ computers
First company to 1000+ WSA endpoints | Power User / Business Ambassador / WSA-C and WSA-E Beta tester
Community LeaderCommunity Leader
Find me on Twitter!

Please use plain text.
Moderator
Rakanisheu
Posts: 690
Registered: ‎03-13-2013

Re: Interesting Air gap protected infection mechanism IF IF true and not a hoax.

As I assumed it was something to do with the USB stick, then its nothing new really. 

Please use plain text.
Frequent Voice
tempnexus
Posts: 63
Registered: ‎10-10-2013

Re: Interesting Air gap protected infection mechanism IF IF true and not a hoax.

"nothing new"

 

Well except for this part...again if it's real:

It then uses sound to establish a data session between the computers to exfiltrate data from airgapped system.

Please use plain text.