3 ms·
well we're talking about a facility that isn't supposed to be connected to the internet. so there has to be an internal actor. like there was with stuxnet
by stevehawk 6y ago
well we're talking about a facility that isn't supposed to be connected to the internet. so there has to be an internal actor. like there was with stuxnet
- shakna 6y agoYes, no, maybe. Whilst you would expect most airgapped systems to also be in buildings that intentionally block signals, there are a ton of "unexpected" interactions, some of which may give you ways to remotely transmit when no transmission is expected to be possible. Like the fact that USB 3.0 can interfere with the 2.4Ghz spectrum [0], thanks to resonance. Israel has also previously demonstrated malware called Odini [1] and aIR-Jumper [2] to bypass Faraday protections around systems and exfiltrate data. [0] https://www.intel.com/content/www/us/en/products/docs/io/universal-serial-bus/usb3-frequency-interference-paper.html https://www.intel.com/content/www/us/en/products/docs/io/uni... [1] https://www.rambus.com/blogs/bypassing-air-gapped-faraday-cages/ https://www.rambus.com/blogs/bypassing-air-gapped-faraday-ca... [2] https://arstechnica.com/information-technology/2017/09/attackers-can-use-surveillance-cameras-to-grab-data-from-air-gapped-networks/ https://arstechnica.com/information-technology/2017/09/attac...
- frombody 6y agoWhat looks like a planned explosion just happend (front page NYT) So it does appear to be someone at the facility.