Security Alerts & News
by Tymoteusz A. Góral

#1017 Malware can use fan noise to steal data from air-gapped systems
Malicious applications can use the noise emanated by a computer's fan speed to relay information to a nearby recording device and steal data from air-gapped, isolated systems.

Other researchers proved in the past that malware could use low-frequency sounds sent through the computer's speakers to exfiltrate data from targeted systems to a nearby microphone-enabled device.

This particular scenario has been proven feasible over the past years, and because of the likelihood of something like this happening, in environments with tight security, some administrators have removed speakers from air-gapped systems.

Four researchers from the Ben-Gurion University of the Negev in Israel have created Fansmitter, a piece of malware that takes the above scenario, but instead of speakers, it uses a computer's fans to send data from the infected host.

Because all data is basically a sequence of ones and zeros, the researchers created Fansmitter to take over the computer's fan speed and make it work at two different speeds, corresponding to a binary "1" and a binary "0".

Fansmitter works with CPU, GPU, or chassis-mounted fans, and can be effective from one to four meters away. Researchers consider this a reliable distance up to which a microphone or a smartphone can be left behind to record sounds emanated from the computer.
Read more
#1018 How to spot Ingenico self-checkout skimmers
#1017 Malware can use fan noise to steal data from air-gapped systems
#1016 Chrome bug makes it easy to download movies from Netflix and Amazon Prime
#1015 Selfrando technique mitigates attacks unmasking Tor users
#1014 Popular anime site (Jkanime) infected, redirecting to exploit kit, ransomware
#1013 Severe Swagger vulnerability compromises NodeJS, PHP, Java
#1012 Malvertising and ransomware: the Bonnie and Clyde of advanced threat (PDF)
#1011 Has the Lizard Squad returned to ruin your day again?
#1010 GozNym: Living in America
#1009 Internet trolls hack popular YouTube channel WatchMojo
#1008 HTML5 ads aren't that safe compared to Flash, experts say
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12