News

Researchers Hack Air-Gapped Computer Using Nine-Year-Old Motorola Phone

An air-gapped computer is the most secure way of storing sensitive data; a PC that has no internet connection and no removable storage or disk drives cannot be compromised by hackers or government surveillance, in theory. Well, it’s time to say goodbye to that theory, as not only have Israeli researchers managed to remotely hack into an air-gapped computer, but they did it with a nine-year-old mobile phone that has no GPRS, Wi-Fi, or mobile data capabilities.

Researchers warn that their findings should encourage companies attempting to protect data via air-gapped systems to “change their security guidelines and prohibit employees and visitors from bringing devices capable of intercepting RF signals,” so says Yuval Elovici, director of the Cyber Security Research Center at Ben-Gurion University of the Negev.

Since smartphones are often restricted in areas which house air-gapped computers, so the researchers from the Cyber Security Center chose to use an old mobile phone that could bypass any security restrictions.

“[U]nlike some other recent work in this field, [this attack] exploits components that are virtually guaranteed to be present on any desktop/server computer and cellular phone,” the researchers note in their paper.

The phone used, a Motorola C123, runs on a Calypso baseband chip from Texas Instruments, and supports 2G communication, but has none of the more advanced networking capacities of modern smartphones. Data was grabbed from air-gapped computers, running Microsoft Windows, Linux, and Ubuntu, at a rate of 1-2bps, allowing the researchers to obtain 256-bit encryption keys from the system via radio frequencies.

“This is not a scenario where you can leak out megabytes of documents, but today sensitive data is usually locked down by smaller amounts of data,” Dudu Mimran, CTO of the Cyber Security Research Center, said. “So if you can get the RSA private key, you’re breaking a lot of things.”

Thank you Wired for providing us with this information.

Image courtesy of Mobile Phones & Smartphones Info.

Ashley Allen

Disqus Comments Loading...

Recent Posts

XPG Launches CORE REACTOR II VE PSU & VENTO PWM Fan Series

Today XPG have launched two new products, the CORE REACTOR II VE PSU available in…

3 hours ago

Bandai Namco Giving Away Free Steam Keys for Games by Novice Developers

Who doesn't love a free game? If you don't, stop reading, go elsewhere, this isn't…

5 hours ago

Horizon Forbidden West PC Update Changelog Released

I'm eager to get around to playing this one, I just need to find time…

5 hours ago

Dragon’s Dogma 2 First Patch is Here!

Dragon's Dogma 2 was going to be a day one purchase for me, and yes,…

5 hours ago

Twitch Now Banning All Content Focusing On Intimate Body Parts

As by now, I'm sure you are aware Twitch has decided to go ahead and…

22 hours ago

Second Patch of “Operation Medic Bag” For Payday 3 Released

I doubt many of you have been keeping up with Payday 3 which is understandable…

24 hours ago