Skip to main content

Hackers circumvent 'air gap' security with a drone that 'reads' the lights on a computer

hacking drone led computer 33574327 l
Alexander Kolomietz/123RF
If you weren’t concerned about the sight of a drone hovering outside your window peering in at you (and, for the record, you probably should be!), you certainly will when you hear that it could be extracting sensitive data from your computer.

That is according to researchers in the Cyber Security Research Labs at Ben-Gurion University of the Negev in Beersheba, Israel, who have demonstrated an espionage technique that would make James Bond blush, in which a quadcopter films the flashing LED lights on a computer and uses this to steal your data, via a Morse code-style message.

Recommended Videos

“In this work, we found a novel method to extract data from a computer in a very covert and speedy way,” researcher Mordechai Guri, the research and development manager at Cyber Security Research Labs, told Digital Trends.

Please enable Javascript to view this content

The attack method is designed to get around computers which use an “air gap” to protect them, basically removing them from the internet so they can’t be hacked in traditional ways.

Fortunately, things are a bit more complicated than simply getting a camera-equipped drone to play peeping tom. To work, the targeted computer first needs to be infected with malware on a USB or SD card, so would-be villains will need to think of a clever way to smuggle one of those into your office before they even think about firing up a UAV.

No, it’s not enormously practical — but due to the speed that LED lights can blink (faster than a human eye), it is possible for hackers to achieve up to 4,000 bits-per-second in data transfer. A couple of megabytes an hour means that it would take aggressors a long time to extract your HD copy of Rogue One: A Star Wars Story, but it does mean that stealing an encryption key wouldn’t take too long.

LED-it-GO. Jumping the Air-Gap with a small HardDrive LED

“We’re academic researchers. We don’t deal with use-cases, but just establish and analyze possible ways to do this,” Guri said. “Certainly, this is not a usual regular grade attack. However, there are organizations such as banks that have air-gapped computers with valuable, sensitive information they want to keep private. In that case, it’s not unimaginable that we may see more extreme methods used to extract data.”

So how should they protect against such an ultra high-tech attack? Ironically, in the most low-fi ways possible. “You could try putting tape over the LEDs, but that’s not an elegant solution,” Guri continued. “Another solution would be to have the computer in a room with blacked-out windows or curtains to reduce the optical visibility of the computer from outside.”

So, basically, the anti-hacking security version of ‘have you tried turning it off and on again?’ advice.

Luke Dormehl
Former Digital Trends Contributor
I'm a UK-based tech writer covering Cool Tech at Digital Trends. I've also written for Fast Company, Wired, the Guardian…
Watch Amazon’s new Ring security drone take on a burglar in first ad
ring always home cam autonomous flying camera news specs price alway connect 2 of 3

Amazon unveiled a bunch of new products on Thursday, September 24, including Ring’s Always Home Cam.

The Always Home Cam is a security drone designed to fly autonomously from room to room to check that your property is secure while you’re out. It does, of course, connect to your smartphone, so if there is an unwelcome visitor, you’ll be able to watch your home being burglarized in real time instead of being surprised about it when you arrive home.

Read more
Amazon’s Prime Air drone delivery plan takes important step forward
watch amazons all new delivery drone zipping through the sky amazon prime air  2019

When Amazon chief Jeff Bezos announced in December 2013 that he wanted to deliver customer packages using small, autonomous flying machines, some people thought he might be in need of a lie-down.

But Bezos was serious, and ever since then, Amazon has been investing time and money in the development of a drone platform that could one day help the company to improve its last-mile delivery performance.

Read more
California startup’s drone software tracks social distancing from the air
Drone Sunset

A California-based startup has created new drone software capable of monitoring the degree of social distancing and face-mask wearing occurring in real time in any given location.

Founded in 2015, Airspace Systems' main business focuses on creating software for drone detection, helping places like airports and stadiums to monitor their skies for rogue drones entering restricted airspace. But its latest offering monitors people, not drones, and could assist a number of states across the U.S. as they try to contain coronavirus outbreaks, Reuters reports.

Read more