+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Wifi 5G WPA WEP Bluetooth Wireless Hacking (https://hackforums.net/forumdisplay.php?fid=104)
+---- Thread: AirHopper: Hacking Into an Isolated Computer Using FM Radio Signals (/showthread.php?tid=4522473)
Pages: Pages
1
2
AirHopper: Hacking Into an Isolated Computer Using FM Radio Signals - The2G - Nov 4, 2014
Hi mates,
I just read a new that surprised me, Security researchers at the Cyber Security Labs at Ben Gurion University in Israel have found a way to snoop on a personal computer even with no network connection.
STEALING DATA USING RADIO SIGNALS
Researchers have developed a proof-of-concept malware that can infiltrate a closed network to lift data from a machine that has been kept completely isolated from the internet or any Wi-Fi connection by using little more than a mobile phone’s FM radio signals.
Here's the proof:
So will the computers be always unsafe, even when they aren't connected to a LAN or other kind of net? Maybe no one is safe... However, would be cool if the researchers release the code (🤣🤣)... After that I really get interested in research about that method, and I want to know other people opinios about it.
The original post: http://thehackernews.com/2014/10/airhopper-hacking-into-isolated.html
* - pomwtin - Nov 4, 2014
Hmm.. so those frequencies comming from MB (cpu??) can be decoded?
I noticed that each keystroke have its own frequency, but did not tought of that (afcorse if this is the same thing).... interesting, thank you for sharing :)
* - Mad76e - Nov 4, 2014
Are still not convinced .. Do you have more info from more sites
Links please :D
* - The2G - Nov 5, 2014
(Nov 4, 2014 03:15 PM)pomwtin Wrote: Hmm.. so those frequencies comming from MB (cpu??) can be decoded?
I noticed that each keystroke have its own frequency, but did not tought of that (afcorse if this is the same thing).... interesting, thank you for sharing :)
No matter bro. I guess that the signal is send to somewhere (inf) with no objetive, only because our PC "creates" automatically that kind of signal in each keystroke. I don't know very well how it works but, will read more about it.
(Nov 4, 2014 03:16 PM)mad76e™ Wrote: Are still not convinced .. Do you have more info from more sites
Links please :D
Yes I do. I'll link a PDF of the creators.
Here it is (Is the datasheet and more info about the proccess and how it works): http://www.slideshare.net/mordechaiguri/air-hoppermalwarefinale
* - mattybeds - Nov 5, 2014
Ive been experimenting via my RTLSDR and found a signal, not sure how to convert it to text. It only happens when I point aerial at GF's laptop while she using it.
* - King of Clubs - Nov 5, 2014
If this is true/works then it's pretty darn cool.
* - yacked2 - Nov 5, 2014
If that accually works, even in a crowd, we fucked up... It's time to use vigenere chiper again :)
* - The2G - Nov 8, 2014
Yes I guess is true... But shall we develop the hack before the protection programs? I mean, if anyone who have that sofware which decodes radio signals into a characters (working as keylloger) it may decode other stuff.
I'll continue reading about, possibly try to code an android app who reads that signals..
* - ciocan - Nov 8, 2014
This concept is very old. I know about experiments successfully conducted in '90 to intercept the signal from a computer monitor (wired) from miles away. Also the keyboard cam be intercepted from large distances. Also it was a software to decode key stokes with audio (each key have a specific sound they claim).
Here is another example based on my experience when dealing with bad sound cards and shitty speakers, you can hear in speakers when the cpu is start to work. It is a specific sound.
Now i also know that if you fine tune in the cpu frequency you can sen it instructions like read hdd... All you need is the adequate equipment and founds to do that.
To intercept the signal from cpu is easy, the complicate part is to send instructions.
* - Mad76e - Nov 8, 2014
(Nov 8, 2014 02:09 PM)ciocan Wrote: This concept is very old. I know about experiments successfully conducted in '90 to intercept the signal from a computer monitor (wired) from miles away. Also the keyboard cam be intercepted from large distances. Also it was a software to decode key stokes with audio (each key have a specific sound they claim).
Here is another example based on my experience when dealing with bad sound cards and shitty speakers, you can hear in speakers when the cpu is start to work. It is a specific sound.
Now i also know that if you fine tune in the cpu frequency you can sen it instructions like read hdd... All you need is the adequate equipment and founds to do that.
To intercept the signal from cpu is easy, the complicate part is to send instructions.
Hmma.. So your need some kind of software that can translate the superweak electromagnetic pulse that the chipset inside the keyboard sends to the computer..
But different keyboard have different chipset and may work on different frequencies?? or?
Anyhow, i know about tapping a coppar cable and how you do that without harming the cable... But how about a keyboard from a distance? lets say a 300 meters? Would it not be hard with a lot of interference?
I have to go over the text again :)
* - ciocan - Nov 8, 2014
All keyboard use the same signal. I dont think they target the CI from keyboard but the signal that travels trough cable and that signal is identical on all keyboards (different connectors, probably different signals and there are 3 types of connectors until now). If the signals are not the same then keyboard will not be recognized. Correct?
Now lets talk about with interference. If you have a bean very narrow you can tune it like a laser in the target spot. I believe that you see in movies equipment (antennas) for spying people what they are talking let say in a park. Something like that can be used also to intercept rf signals from keyboard, cpu or something else.
Oh and please change your pictures from your avatar because i was trying to kill the bug from my screen 😝
* - Mad76e - Nov 8, 2014
(Nov 8, 2014 04:37 PM)ciocan Wrote: Oh and please change your pictures from your avatar because i was trying to kill the bug from my screen 😝
Damn... I hope you didn't slap the monitor to hard.. Monitors are expensive.. Remind me tomorrow 🤣 almost time to sleep here
* - ciocan - Nov 8, 2014
Check this out!
http://lasec.epfl.ch/keyboard/
If is possible from 20m then can be possible from a bigger distance with an adequate antenna/equipment.
Now all we have to do is to deauth a client and force it to input again the pass. Here is a new idea how to get wpa/wpa2 keys 🙂
By the way, from where i can get this AirHopper apk? I try to search but i found something else with similar name...
Here is something else interesting
http://books.google.ro/books?id=OOe5C79fQQsC&pg=PA185&lpg=PA185&dq=intercept+keyboard+signal&source=bl&ots=ABCT3OtBPR&sig=k0osbr6iIxmfV6dGTvQYRuYviO0&hl=ro&sa=X&ei=z9ReVLimB4rCPO2kgZgB&ved=0CDAQ6AEwAzgU#v=onepage&q=intercept%20keyboard%20signal&f=false
So the concept is very old and can be used even today...
* - The2G - Nov 9, 2014
Ciocan: I guess you can't get the apk instead of is coded by you. I don't think they're going to release to all the public. But can try to code something similar..
However I thinks is a bit hard to code that, because you should gather all the frequencies before and add it to a lib or something to be able to read and after to convert it to a character.
* - ciocan - Nov 9, 2014
I try to search on FM and i find some frequency where you can hear when a key is stroked. Probably i need a spectrum analyzer to see what is the correct frequency.
I dont think it will require a database if the signal is decoded. Is just a code that correspond to a specific key. The code can be found on internet or in the old books about computers.
This is my opinion, maybe is right or wrong, i cant be sure...