maglevfans100663721orig
Security

Researchers steal data from a PC by controllng the noise from the fans

Even the noise from your PC’s fans could be used to steal the data inside. Researchers in Israel have found a way to do just that by hijacking the fans and manipulating the sounds they create.

The research from Ben-Gurion University of the Negev shows how data could be stolen from “air-gapped” computers, which are not connected to the Internet.

These air-gapped computers are isolated and often used for sensitive information. To hack them, attackers typically need to gain physical access and install malware, possibly through a USB stick. 

Past research has shown that once infected, data can be transferred from air-gapped computers through the speakers in the form of ultrasonic signals. Simply uninstalling the speakers can avoid the risk.

The researchers in Israel came up with another way to target these isolated systems. Their malware can secretly send the data over audio waves generated by the computer’s fans, according to a paper they released on Wednesday.

The malware, called Fansmitter, works by controlling the speed at which the fans run. This can create varying acoustic tones that can be used to transmit the data.

To receive the data, the hackers would need to compromise a nearby mobile phone. This phone could then decode the noise from the fans, assuming the device is close enough to the sound or within eight meters.

Once the noise is decoded, the phone could then relay all information back to the hackers. The researchers tested their malware using a Dell desktop and a Samsung Galaxy S4 phone.

Of course, the malware has its limitations. A maximum 15 bits per minute can be transmitted, though that's enough to send passwords and encryption keys, according to the researchers.

Attacking PCs this way isn’t very practical. But given that most PCs and electronics are built with cooling fans, all kinds of devices are potentially vulnerable, the researchers said.

Owners of these air-gapped systems, however, can still prevent the risk. They can use water-cooling systems instead of fans within their computers. Or they can choose to ban the use of mobile phones around their air-gapped systems, the researchers said.

IDG Insider

PREVIOUS ARTICLE

« The RemoBell smart video doorbell detects both body heat and motion to reduce false alarms

NEXT ARTICLE

The 'summer of AI' is here, this startup chief says »
author_image
IDG News Service

The IDG News Service is the world's leading daily source of global IT news, commentary and editorial resources. The News Service distributes content to IDG's more than 300 IT publications in more than 60 countries.

  • Mail

Poll

Do you think your smartphone is making you a workaholic?