Current Location: Home > Hot News

Malware Steals Data By Adjusting Screen Brightness

Date Of Publication:2020-02-16 Click-Through Rate:6

A security researcher has discovered a novel way to steal data from a PC that isn't connected to a network (air-gapped) by manipulating the brightness settings of a computer monitor.

As The Hacker News reports, the new technique was discovered/created by academic researcher Dr. Mordechai Guri of the Cyber-Security Research Center located at the Ben-Gurion University of the Negev in Israel. It relies on the air-gapped computer having special malware installed capable of changing the brightness of a display. However, the changes are only very small adjustments to the RGB color components of each pixel and therefore not detectable with the naked eye.

Stealing data from the infected machine is achieved by encoding the information and transmitting it using the screen brightness changes in a sequential pattern, which is very similar to how Morse code works. The only other requirement for this to work is a camera pointed at the display which can either record or stream the pattern being transmitted. Once the pattern is received, it can be converted back into meaningful data.

For this hack to work in the real world would require someone with access to the air-gapped machine installing the malware. The camera used can be anything from a compromised surveillance camera present in the same room, a webcam, or just a smartphone camera left pointed towards the display (and a strong, reliable 4G signal).

Related

  • Find an Xbox Security Bug? Microsoft Might Have Some Cash for You
  • Hackers Pose as Wall Street Journal Reporter to Phish Victims
  • New Coronavirus Strain? Nope, Just Hackers Trying to Spread Malware

Although this technique is unlikely to ever be used as long as easier methods exist, it's important from a security standpoint to know it's possible and therefore mitigating action can be taken to ensure it can never work effectively.

Further Reading

  • Will the Coronavirus Disrupt the RSA Show? IBM Decides to Skip
  • Database With Sensitive Plastic Surgery Photos Exposed Online
  • The Quantified Employee: How Companies Use Tech to Track Workers
  • Huawei Accused of Offering Bonuses In Exchange for US Trade Secrets
  • More in Security

More Security Reviews

  • Private Internet Access VPN (for macOS)
  • NordPass Premium
  • Qustodio
  • Virtru Email Protection for Gmail
  • ShieldApps Cyber Privacy Suite

More Security Best Picks

  • The Best VPNs for Gaming
  • The Best VPNs for BitTorrent for 2020
  • The Best VPNs for Netflix
  • The Best Mac VPNs for 2020
  • The Best Business VPN Clients for 2019

Next: Google Maps Celebrat

Last: Race to 5G: Get Read