I came across a paper on the first GPU keylogger[1] recently, which is quite clever, but maybe not sneaky enough. Sneaky-wise, hypervisor/system management pro

I came across a paper on the first GPU keylogger[1] recently, which is quite clever, but maybe not sneaky enough. Sneaky-wise, hypervisor/system management processor/other embedded stuff (SMBus, BIOS/EFI, etc) are persistent, and really quite tricky to be sure you're rid of. Disk controllers, and especially network controllers could be very effective since there are a vast number of ways of getting something down a network/into a file remotely. Sneaky exfiltration/comms could include some of the EMI TEMPEST-style attacks if you can get close enough. For bonus points, if you can get line-of-sight, optical TEMPEST[2] using status LEDs is just about plausible. [1] http://www.cs.columbia.edu/~mikepo/papers/gpukeylogger.eurosec13.pdf http://www.cs.columbia.edu/~mikepo/papers/gpukeylogger.euros... [2] http://rootsecure.net/content/downloads/pdf/optical_tempest_optical.pdf http://rootsecure.net/content/downloads/pdf/optical_tempest_...