2 ms·
You say that but I am actively dealing with a chinese malware(public info) I won't name that does just that but with USB. It sideloads a dll when a shortcut ope
by _8j50 4y ago
You say that but I am actively dealing with a chinese malware(public info) I won't name that does just that but with USB. It sideloads a dll when a shortcut opens a legit app on a USB (shortcut is tricky in that it looke like a folder and opens a folder also when you click on it) it then collecte all kinds of documents and exfils to the internet but if there is no internet it archives it back to the USB so next time it runs with internet access it will also exfil any docs on the USB from the airgapped machines, fortunately just a spillover infection for us but these tricks in the paper would enable to not wait for a USB or internet access, it would be more realtime. Like if it is an ICS system for nuclear centrifuges it will send back what ir found and accept destructive tasks.
- userbinator 4y agoYou still need a receiver within range in order to do this.
- rtev 4y agoSomeone attacking a nuclear facility can get a receiver within range
- toomanybeersies 4y agoWouldn't there the small matter of a few meters of concrete attenuating any signals coming from a nuclear facility?
- RF_Savage 4y agoNot only that. Due to the extremely low bandwidth in these channels and being one way, sendimg documents would be extremely slow. Likely on the order of hours or days for a text only word document. You cannot do any re-transmissions for broken bits. And the range is VERY low for normal PC's that have had to pass EMC tests. For an all glass gamer RGB PC the things will be different.
- rtev 4y agoIt’s true that there are many better ways to do it. If a nation state only had this option, I think they could pull it off though.
- happyopossum 4y ago> accept destructive tasks. Not with this - it’s a one way channel