Academics Turn PC Power Units Into Speakers To Leak Secrets From Air-Gapped Systems

Academics from an Israeli university have published new research last week showing how an attacker could turn a computer’s power supply unit into a rudimentary speaker that can secretly transmit data from an infected host using audio waves. From a report: The technique, named POWER-SUPPLaY, is the work of Mordechai Guri, the head of R&D at the Ben-Gurion University of the Negev, in Israel. Over the last half-decade, Guri has been pioneering research into new covert data exfiltration channels. The techniques Guri has been developing can be used for stealing data through unconventional means. Guri has been developing these techniques specifically for extracting data from air-gapped systems — computers isolated on local networks with no internet access. Such computers are often used on government or corporate networks to store sensitive data, such as classified files or intellectual property. Air-gapped systems are protected by several layers of defenses, on top of the “air gap,” and you need novel data transmission techniques to go around these defenses. For example, some air-gapped systems don’t have speakers, because it’s been proven in the past that speakers could be abused to leak information from a secure system using inaudible sound waves.