Re:SATAn: Air-Gap Exfiltration Attack via Radio Signals from...
by moltude on Monday July 18, 2022 @02:32PM
(#32141687)
didn't stuxnet jump into an air gaped system? I'm curious if there is significant difference between egress and ingress into air gaped systems.
Re:SATAn: Air-Gap Exfiltration Attack via Radio Signals from...
by legalcorrection on Monday July 18, 2022 @02:48PM
(#32141903)
I thought a thumbdrive was the attack vector for stuxnet.
Re:SATAn: Air-Gap Exfiltration Attack via Radio Signals from...
by TedDoesntTalk on Monday July 18, 2022 @04:28PM
(#32143234)
Re:SATAn: Air-Gap Exfiltration Attack via Radio Signals from...
by SketchySeaBeast on Monday July 18, 2022 @03:36PM
(#32142555)
> I'm curious if there is significant difference between egress and ingress into air gaped systems.
I would expect so. I'm fairly certain there's a big difference between pulling fuzzy data out and figuring out what it means as opposed to trying to electromagnetically fling fuzzy data into a system that's not supposed to have information flung at it and having the system accept what you mean.
I suspect you're going to find out in 50 years when government documents (not inherently US gov) are declassified.
State level spying is the only thing I can think of where the value of the information is so high (making the effort of this kind of attack is worth it) and where there are many scenarios where the volume of highly valuable information is comparatively tiny.
Just as some very off the cuff examples of what I mean by the latter. We don't need to exfiltrate satellite photos of things (gigabytes of data), but, it could be very valuable to exfiltrate the metadata of what they are looking at (coordinates and time)
Also, exfiltrating information like names of sources or meeting points or other methods can be trivial amounts of data but finding even a single compromised person on our side would be immensely valuable!
I'm reminded of "The Thing": https://en.wikipedia.org/wiki/The_Thing_%28listening_device%...