4 ms·
BadBIOS was supposed to communicate with C&C systems using sounds inaudible to the human ear that could be picked up by the microphone of a nearby (also infecte
by wtracy 12y ago
BadBIOS was supposed to communicate with C&C systems using sounds inaudible to the human ear that could be picked up by the microphone of a nearby (also infected) computer.
Hence 'airgapped" (not connected to the network) computers could still export private information to a botnet operator.
- valarauca1 12y agoNo. 'Airgapped' computers without infected BIOSes could not leak information. Sneakernet computers with bad BIOSes could. Unless you can pull off a remote code execution via microphone input, or speaker feed back. Its unlikely an air-gapped computer will be infected.
- AnimalMuppet 12y agoI think you missed the "already infected" part. If I've got drivers running on two computers that only are in the same room, and they both have speakers and microphones, then yes, I may be able to pull this off. If one of them is connected to the outside world and the other isn't, I may be able to connect from the outside world to the unconnected computer using this acoustic method. None of this helps me get the infection on the unconnected computer, though. For that, there has to be something else - sneakernet USBs, for example, as you mentioned.
- wtracy 12y agoSince we're being pedantic :-) what if the original infection occurred before the motherboard left the factory? Does that still fail to meet your definition of "airgapped"? More seriously, the "virus that jumps airgaps" was a sensationalist headline from the get-go. I just was trying to explain where the claim originated.