Air-gap data leak via RAM radio signals
The gist
Researcher Mordechai Guri demonstrated malware can leak air-gapped data via RAM radio signals at 1,000 bits per second.
The channel is slow for bulk files but enough for keys and credentials.
How it unfolded
- 2023A version of the RAMBO work was accepted to the Nordic Conference on Secure IT Systems.
- recentlyThe paper "RAMBO: Leaking Secrets from Air-Gap Computers by Spelling Covert Radio Signals from Computer RAM" was posted to arXiv as arXiv:2409.02292.
- recentlyGuri demonstrated that malware on an air-gapped computer can generate radio signals from memory buses, leaking files, keystrokes and encryption keys to a remote attacker with a software-defined radio and antenna at 1,000 bits per second.