New Malware Can Jump Air Gaps Using Inaudible Sound

[Axon]

Dec 2 2013

Computer scientists have developed a malware prototype that uses inaudible audio signals to communicate, a capability that allows the malware to covertly transmit keystrokes and other sensitive data even when infected machines have no network connection.


The proof-of-concept software—or malicious trojans that adopt the same high-frequency communication methods—could prove especially adept in penetrating highly sensitive environments that routinely place an "air gap" between computers and the outside world. Using nothing more than the built-in microphones and speakers of standard computers, the researchers were able to transmit passwords and other small amounts of data from distances of almost 65 feet. The software can transfer data at much greater distances by employing an acoustical mesh network made up of attacker-controlled devices that repeat the audio signals.

http://arstechnica.com/security/2013/12/scientist-developed-malware-covertly-jumps-air-gaps-using-inaudible-sound/


That's damn scary.

[Stackprotector]

I did not really find it stunning or scary, it's just a form of Steganography.

[Kulverstukas]

The principle might not be surprising, however the method is very scary :/
I mean, inaudible sound to infect your computer? dafuq.

[techb]

It seems like the computer will need to be infected by traditional means first though. Audio only being used to communicate between attacker or other infected systems. Clever idea though. Finding infected computers could use devices that are used to find bugs in a home or area. Frequency detection is really easy and I bet there could even be an app for a smart phone that could be used to detect something like this.

[Stackprotector]

The principle might not be surprising, however the method is very scary :/
I mean, inaudible sound to infect your computer? dafuq.

It's not the infection, it's the communication. Which in other terms would mean like techb said that is needs to be infected through other means. This can be a USB or something. Though transfer rate is only a few bits per seconds it can still be usefull

[Snayler]

I love it how the media dramatizes everything. Media, you drama queen...

Well, off to buy some earplugs for my computers. 

[vezzy]

Not only is it solely for communication purposes, but it needs to be done extremely close range (same room) for it to work.

[Axon]

The concept is effective when you try to steal sensitive data from research labs, knowing the fact that almost all the computers that come with research equipments are disconnected form the internet. However, I think there is a way to defeat this kind of malware, simply disable the sound drive in your computer. I think this could work against it.


On a side note, if you turn off the sound drive and you fart while using an infected PC, could the software transmit the data using the sound of your fart as a transmission medium 


Wireless farting FTW 

[Kulverstukas]

DERP
Wireless farting FTW 

[lucid]

See why couldn't I think of something cool like that.

*lucid sighs

Ingenuity.... it's for other people.