Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

AirHopper: Hacking Into an Isolated Computer Using FM Radio Signals

Hi mates,

I just read a new that surprised me, Security researchers at the Cyber Security Labs at Ben Gurion University in Israel have found a way to snoop on a personal computer even with no network connection.

STEALING DATA USING RADIO SIGNALS
Researchers have developed a proof-of-concept malware that can infiltrate a closed network to lift data from a machine that has been kept completely isolated from the internet or any Wi-Fi connection by using little more than a mobile phone’s FM radio signals.

Here's the proof:




So will the computers be always unsafe, even when they aren't connected to a LAN or other kind of net? Maybe no one is safe... However, would be cool if the researchers release the code (🤣🤣)... After that I really get interested in research about that method, and I want to know other people opinios about it.

The original post: http://thehackernews.com/2014/10/airhopp...lated.html
[Image: K5gvC2t.png]

Hmm.. so those frequencies comming from MB (cpu??) can be decoded?
I noticed that each keystroke have its own frequency, but did not tought of that (afcorse if this is the same thing).... interesting, thank you for sharing :)
9x HD5970
2X GTX 980Ti
GTX 980
GTX 1060
R9 390


Cracking your hashes
Are still not convinced .. Do you have more info from more sites

Links please :D
(Nov 4, 2014 03:15 PM)pomwtin Wrote:  Hmm.. so those frequencies comming from MB (cpu??) can be decoded?
I noticed that each keystroke have its own frequency, but did not tought of that (afcorse if this is the same thing).... interesting, thank you for sharing :)

No matter bro. I guess that the signal is send to somewhere (inf) with no objetive, only because our PC "creates" automatically that kind of signal in each keystroke. I don't know very well how it works but, will read more about it.

(Nov 4, 2014 03:16 PM)Mad76e Wrote:  Are still not convinced .. Do you have more info from more sites

Links please :D

Yes I do. I'll link a PDF of the creators.

Here it is (Is the datasheet and more info about the proccess and how it works): http://www.slideshare.net/mordechaiguri/...warefinale
[Image: K5gvC2t.png]

Ive been experimenting via my RTLSDR and found a signal, not sure how to convert it to text. It only happens when I point aerial at GF's laptop while she using it.
If this is true/works then it's pretty darn cool.
If that accually works, even in a crowd, we fucked up... It's time to use vigenere chiper again :)
Yes I guess is true... But shall we develop the hack before the protection programs? I mean, if anyone who have that sofware which decodes radio signals into a characters (working as keylloger) it may decode other stuff.

I'll continue reading about, possibly try to code an android app who reads that signals..
[Image: K5gvC2t.png]

This concept is very old. I know about experiments successfully conducted in '90 to intercept the signal from a computer monitor (wired) from miles away. Also the keyboard cam be intercepted from large distances. Also it was a software to decode key stokes with audio (each key have a specific sound they claim).
Here is another example based on my experience when dealing with bad sound cards and shitty speakers, you can hear in speakers when the cpu is start to work. It is a specific sound.
Now i also know that if you fine tune in the cpu frequency you can sen it instructions like read hdd... All you need is the adequate equipment and founds to do that.
To intercept the signal from cpu is easy, the complicate part is to send instructions.
[Image: aLep48U.png]
(Nov 8, 2014 02:09 PM)ciocan Wrote:  This concept is very old. I know about experiments successfully conducted in '90 to intercept the signal from a computer monitor (wired) from miles away. Also the keyboard cam be intercepted from large distances. Also it was a software to decode key stokes with audio (each key have a specific sound they claim).
Here is another example based on my experience when dealing with bad sound cards and shitty speakers, you can hear in speakers when the cpu is start to work. It is a specific sound.
Now i also know that if you fine tune in the cpu frequency you can sen it instructions like read hdd... All you need is the adequate equipment and founds to do that.
To intercept the signal from cpu is easy, the complicate part is to send instructions.

Hmma.. So your need some kind of software that can translate the superweak electromagnetic pulse that the chipset inside the keyboard sends to the computer..

But different keyboard have different chipset and may work on different frequencies?? or?

Anyhow, i know about tapping a coppar cable and how you do that without harming the cable... But how about a keyboard from a distance? lets say a 300 meters? Would it not be hard with a lot of interference?

I have to go over the text again :)
All keyboard use the same signal. I dont think they target the CI from keyboard but the signal that travels trough cable and that signal is identical on all keyboards (different connectors, probably different signals and there are 3 types of connectors until now). If the signals are not the same then keyboard will not be recognized. Correct?
Now lets talk about with interference. If you have a bean very narrow you can tune it like a laser in the target spot. I believe that you see in movies equipment (antennas) for spying people what they are talking let say in a park. Something like that can be used also to intercept rf signals from keyboard, cpu or something else.

Oh and please change your pictures from your avatar because i was trying to kill the bug from my screen 😝
[Image: aLep48U.png]
(Nov 8, 2014 04:37 PM)ciocan Wrote:  Oh and please change your pictures from your avatar because i was trying to kill the bug from my screen 😝

Damn... I hope you didn't slap the monitor to hard.. Monitors are expensive.. Remind me tomorrow 🤣 almost time to sleep here
Check this out!
http://lasec.epfl.ch/keyboard/
If is possible from 20m then can be possible from a bigger distance with an adequate antenna/equipment.

Now all we have to do is to deauth a client and force it to input again the pass. Here is a new idea how to get wpa/wpa2 keys 🙂


By the way, from where i can get this AirHopper apk? I try to search but i found something else with similar name...


Here is something else interesting
http://books.google.ro/books?id=OOe5C79f...al&f=false

So the concept is very old and can be used even today...
[Image: aLep48U.png]
Ciocan: I guess you can't get the apk instead of is coded by you. I don't think they're going to release to all the public. But can try to code something similar..

However I thinks is a bit hard to code that, because you should gather all the frequencies before and add it to a lib or something to be able to read and after to convert it to a character.
[Image: K5gvC2t.png]

I try to search on FM and i find some frequency where you can hear when a key is stroked. Probably i need a spectrum analyzer to see what is the correct frequency.
I dont think it will require a database if the signal is decoded. Is just a code that correspond to a specific key. The code can be found on internet or in the old books about computers.
This is my opinion, maybe is right or wrong, i cant be sure...
[Image: aLep48U.png]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by CokolinoMafijaMar 20, 2025 05:15 PM 14 499 Mar 20, 2025 05:15 PM
Last Post: Rogers Communications
by H-GaMeJul 23, 2024 10:54 AM 7 532 Jul 23, 2024 10:54 AM
Last Post: luddite
by HephaestusJul 21, 2023 06:46 AM 9 671 Jul 21, 2023 06:46 AM
Last Post: sub0day