Overclock.net › Forums › Industry News › Technology and Science News › [ARS] Meet “badBIOS,” the mysterious Mac and PC malware that jumps airgaps
New Posts  All Forums:Forum Nav:

[ARS] Meet “badBIOS,” the mysterious Mac and PC malware that jumps airgaps - Page 11

post #101 of 154
What I don't get is does this use your powered AMP + speakers connected to the onboard analogue connectors or just the now almost no longer used 'on board' speaker that's usually only fitted to OEM wholesale desktop machines? If so would it be possible to transmit from powered speakers or a cinema amp lets say from BIOS via low level hardware calls to the soundchip/card rather than when booted into an operating system?

some clarification needed here if the story is Bull or not

.......................



My other final thought is this.

If you have a smart phone or tablet on your home your truly boned now from China/Russia/U(N)SA or ANYONE who wants your information so go enjoy that new Nexus / Iphone / Galaxy and the open gateway it provides bringing an alien network into your own environment.

In theory you could spend time segregating LAN / Wireless LAN from your mobile devices (which have now been proven to be extensible hacking / tracking devices) and still not worry as you can keep your data safe on another VLAN / Subnet straight out to the internet. In fact custom router firmware can do this easy as OEM's D-Links for example also have back doors ( rolleyes.gif )

but....

If true and not a Joke then this technology bypasses that? In theory you could broadcast data (whatever that actually was from non mounted drives? does it mount them???) from a PC speaker to a Smart Phones Speaker which is connected VIA GPS to the internet

BAM.. your data is now insecure again

The take home lesson here is don't bring OEM devices into your home. As they don't care about your security as much as you do

Custom Router
Custom PC (no on board speaker)
Custom Rooted Phone / Tablet with Linux
Segregated VLAN's for guest wireless for when friends and families mobiles are brought into your network.
Edited by Pip Boy - 11/1/13 at 6:19am
post #102 of 154
Quote:
Originally Posted by Oddworld Abe View Post

They said it was receiving data even without those things, they measured that. What don't you believe?

Curious if it's data or ARP requests or something along those lines.
Cen2
(12 items)
 
  
CPUMotherboardRAMHard Drive
i3-4130 ASUS Z87M-Plus CT2KIT51264BA1339 WD5000AAKX  
Hard DriveHard DriveHard DriveOptical Drive
WD30000FYYZ WD30000FYYZ WD30000FYYZ WH14NS40 
CoolingOSPowerCase
RR-B10-212P-G1 FQC-06950 SSR-450RM Fractal Define Mini 
  hide details  
Reply
Cen2
(12 items)
 
  
CPUMotherboardRAMHard Drive
i3-4130 ASUS Z87M-Plus CT2KIT51264BA1339 WD5000AAKX  
Hard DriveHard DriveHard DriveOptical Drive
WD30000FYYZ WD30000FYYZ WD30000FYYZ WH14NS40 
CoolingOSPowerCase
RR-B10-212P-G1 FQC-06950 SSR-450RM Fractal Define Mini 
  hide details  
Reply
post #103 of 154
Quote:
Originally Posted by roleki View Post

Curious if it's data or ARP requests or something along those lines.

in theory in future if its extremely amazing the end points may even use an entirely different protocol stack when available and fall back to TCP/IP when not..
post #104 of 154
I am speechless.

Airgap traveling malware.
BSOD Machine
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD FX 6300 @ 4.80 GHz Gigabyte 990FXA UD3(Rev 4.1) MSI Gaming R9 270X 2GB @ 1350/1500 16GB of stuff 
Hard DriveHard DriveHard DriveOptical Drive
Kingston SSD(now) 96GB WD Green 1TB Crucial MX300 750GB LG Electronics 14x Internal BDXL 
CoolingOSMonitorKeyboard
Hyper 212+ Push/Pull Windows10 Home Premium 64 Bit ASUS VN289 Azio Large Print Tri-Color Backlit Wired Keyboard 
PowerCaseMouseAudio
EVGA 850 BQ Xclio 320 Black Sentey NEBULUS mouse ASUS Xonar DG 5.1 
  hide details  
Reply
BSOD Machine
(16 items)
 
  
CPUMotherboardGraphicsRAM
AMD FX 6300 @ 4.80 GHz Gigabyte 990FXA UD3(Rev 4.1) MSI Gaming R9 270X 2GB @ 1350/1500 16GB of stuff 
Hard DriveHard DriveHard DriveOptical Drive
Kingston SSD(now) 96GB WD Green 1TB Crucial MX300 750GB LG Electronics 14x Internal BDXL 
CoolingOSMonitorKeyboard
Hyper 212+ Push/Pull Windows10 Home Premium 64 Bit ASUS VN289 Azio Large Print Tri-Color Backlit Wired Keyboard 
PowerCaseMouseAudio
EVGA 850 BQ Xclio 320 Black Sentey NEBULUS mouse ASUS Xonar DG 5.1 
  hide details  
Reply
post #105 of 154
Quote:
Originally Posted by Truedeal View Post

I am speechless.

Airgap traveling malware.

I was at first too...but if you look at some of my previous posts it is actually not that big of a deal. It used to be fairly common. The transfer speed is just so slow that it has become forgotten technology.

I am going to do it my self this weekend...planing to even send the sound over cell phones just for the fun of it.
My System
(16 items)
 
  
CPUMotherboardGraphicsGraphics
2600K @ 4.7GHz Asus P8P67 B3 GTX 580 EVGA Hydro Copper 2 GTX 580 EVGA  
RAMHard DriveOptical DriveOS
4x4GB G.Skill Ripjaws bunch of 'em Blu-Ray For movies Windows 8.1 
MonitorMonitorKeyboardPower
24.4" Hans G HH251 X2 Yamakasi DS270  Blah 1000watt Super Flower 
CaseMouseMouse PadAudio
Built into Desk Microsoft SideWinder X8 Comfy one... Creative Extreme Gamer 
  hide details  
Reply
My System
(16 items)
 
  
CPUMotherboardGraphicsGraphics
2600K @ 4.7GHz Asus P8P67 B3 GTX 580 EVGA Hydro Copper 2 GTX 580 EVGA  
RAMHard DriveOptical DriveOS
4x4GB G.Skill Ripjaws bunch of 'em Blu-Ray For movies Windows 8.1 
MonitorMonitorKeyboardPower
24.4" Hans G HH251 X2 Yamakasi DS270  Blah 1000watt Super Flower 
CaseMouseMouse PadAudio
Built into Desk Microsoft SideWinder X8 Comfy one... Creative Extreme Gamer 
  hide details  
Reply
post #106 of 154
For those of you that think speakers can't produce high frequencies, you should research the instance where a guy unlocked his car using his key remote over a cell phone. I don't have the time to find it and link it, but it happened, and that's way outside the designed specifications for a cell phone speaker.
Finally...
(20 items)
 
  
CPUMotherboardGraphicsRAM
Intel 4930k @4.4GHz ASUS Rampage IV Extreme Black Edition Nvidia GTX 1070 Founders Edition 32GB Corsair Vengeance Pro DDR3-2400 
Hard DriveHard DriveOptical DriveCooling
Samsung 850 Pro 128GB 2TB WD Black ASUS Blu-ray combo, LiteOn dvdrw MCR320 
CoolingCoolingCoolingCooling
MCR320 MCP655 Heatkiller 3.0 Nickel plated EK Multi-Option 150 Res 
OSMonitorKeyboardPower
windows 10 HP 32q Logitech G19 & Logitech G13 EVGA SuperNOVA 1300 G2 
CaseMouseMouse PadAudio
Mountain Mods U2-UFO Razer Mamba Razer Destructor Logitech G930 
  hide details  
Reply
Finally...
(20 items)
 
  
CPUMotherboardGraphicsRAM
Intel 4930k @4.4GHz ASUS Rampage IV Extreme Black Edition Nvidia GTX 1070 Founders Edition 32GB Corsair Vengeance Pro DDR3-2400 
Hard DriveHard DriveOptical DriveCooling
Samsung 850 Pro 128GB 2TB WD Black ASUS Blu-ray combo, LiteOn dvdrw MCR320 
CoolingCoolingCoolingCooling
MCR320 MCP655 Heatkiller 3.0 Nickel plated EK Multi-Option 150 Res 
OSMonitorKeyboardPower
windows 10 HP 32q Logitech G19 & Logitech G13 EVGA SuperNOVA 1300 G2 
CaseMouseMouse PadAudio
Mountain Mods U2-UFO Razer Mamba Razer Destructor Logitech G930 
  hide details  
Reply
post #107 of 154
Quote:
Originally Posted by zooterboy View Post

For those of you that think speakers can't produce high frequencies, you should research the instance where a guy unlocked his car using his key remote over a cell phone. I don't have the time to find it and link it, but it happened, and that's way outside the designed specifications for a cell phone speaker.


What? Car key remotes use radio signals, not sound. Two very different things.

Also:

http://www.snopes.com/autos/techno/keyless.asp
http://urbanlegends.about.com/library/bl_unlock_door.htm
Main
(21 items)
 
HTPC
(10 items)
 
 
CPUMotherboardGraphicsRAM
i5 2550k P8P67 Pro Sapphire HD 7950 G.Skill RipJaws X 1600 Cas 9 
Hard DriveHard DriveHard DriveCooling
Corsair Force 120 WD Blue 500GB WD Caviar Green 1TB XSPC RayStorm 
CoolingCoolingCoolingCooling
RX240 MCR 220 EK 7950 Copper Acetal  DDC-1T 
OSMonitorMonitorKeyboard
Windows 7 64-bit Dell U2311H Oculus Rift DK2 Ducky Shine 3 MX Brown 
PowerCaseMouseAudio
Corsair TX 750W CoolerMaster CM690 II G500 Klipsch ProMedia 2.1 
Audio
Asus Xonar DX 
CPUMotherboardRAMHard Drive
A10-6800K Gigabyte GA-F2A85XN-WIFI G Skill 1600 CAS9 Kingston SSD Now 60GB 
Hard DriveOptical DriveCoolingOS
WD Caviar Blue 1TB LG Slim Blu-Ray player Silverstone NT06-PRO  Widows 7 Home Premium 
PowerCase
Silverstone Sfx Series ST45SF 450W Silverstone SG05 
  hide details  
Reply
Main
(21 items)
 
HTPC
(10 items)
 
 
CPUMotherboardGraphicsRAM
i5 2550k P8P67 Pro Sapphire HD 7950 G.Skill RipJaws X 1600 Cas 9 
Hard DriveHard DriveHard DriveCooling
Corsair Force 120 WD Blue 500GB WD Caviar Green 1TB XSPC RayStorm 
CoolingCoolingCoolingCooling
RX240 MCR 220 EK 7950 Copper Acetal  DDC-1T 
OSMonitorMonitorKeyboard
Windows 7 64-bit Dell U2311H Oculus Rift DK2 Ducky Shine 3 MX Brown 
PowerCaseMouseAudio
Corsair TX 750W CoolerMaster CM690 II G500 Klipsch ProMedia 2.1 
Audio
Asus Xonar DX 
CPUMotherboardRAMHard Drive
A10-6800K Gigabyte GA-F2A85XN-WIFI G Skill 1600 CAS9 Kingston SSD Now 60GB 
Hard DriveOptical DriveCoolingOS
WD Caviar Blue 1TB LG Slim Blu-Ray player Silverstone NT06-PRO  Widows 7 Home Premium 
PowerCase
Silverstone Sfx Series ST45SF 450W Silverstone SG05 
  hide details  
Reply
post #108 of 154
Quote:
Originally Posted by GingerJohn View Post

Quote:
Originally Posted by zooterboy View Post

For those of you that think speakers can't produce high frequencies, you should research the instance where a guy unlocked his car using his key remote over a cell phone. I don't have the time to find it and link it, but it happened, and that's way outside the designed specifications for a cell phone speaker.


What? Car key remotes use radio signals, not sound. Two very different things.

Also:

http://www.snopes.com/autos/techno/keyless.asp
http://urbanlegends.about.com/library/bl_unlock_door.htm

Duh. doh.gif That's what I get for posting before I'm completely awake...
Finally...
(20 items)
 
  
CPUMotherboardGraphicsRAM
Intel 4930k @4.4GHz ASUS Rampage IV Extreme Black Edition Nvidia GTX 1070 Founders Edition 32GB Corsair Vengeance Pro DDR3-2400 
Hard DriveHard DriveOptical DriveCooling
Samsung 850 Pro 128GB 2TB WD Black ASUS Blu-ray combo, LiteOn dvdrw MCR320 
CoolingCoolingCoolingCooling
MCR320 MCP655 Heatkiller 3.0 Nickel plated EK Multi-Option 150 Res 
OSMonitorKeyboardPower
windows 10 HP 32q Logitech G19 & Logitech G13 EVGA SuperNOVA 1300 G2 
CaseMouseMouse PadAudio
Mountain Mods U2-UFO Razer Mamba Razer Destructor Logitech G930 
  hide details  
Reply
Finally...
(20 items)
 
  
CPUMotherboardGraphicsRAM
Intel 4930k @4.4GHz ASUS Rampage IV Extreme Black Edition Nvidia GTX 1070 Founders Edition 32GB Corsair Vengeance Pro DDR3-2400 
Hard DriveHard DriveOptical DriveCooling
Samsung 850 Pro 128GB 2TB WD Black ASUS Blu-ray combo, LiteOn dvdrw MCR320 
CoolingCoolingCoolingCooling
MCR320 MCP655 Heatkiller 3.0 Nickel plated EK Multi-Option 150 Res 
OSMonitorKeyboardPower
windows 10 HP 32q Logitech G19 & Logitech G13 EVGA SuperNOVA 1300 G2 
CaseMouseMouse PadAudio
Mountain Mods U2-UFO Razer Mamba Razer Destructor Logitech G930 
  hide details  
Reply
post #109 of 154
So the computer had received the virus from a USB drive and then began to communicate to others using high frequency sounds?

How does a computer read or take these frequencies? Do they have to have a mic on? Or can the sound be absorbed by the speakers? Makes no sense to me.
M1 Abrams
(18 items)
 
Asus G53
(0 items)
Asus G771
(8 items)
 
CPUMotherboardGraphicsRAM
i7 3930K Asus Sabertooth X79 Geforce GTX 780 EVGA SC 3GB + XSPC Waterblock Patriot Viper 3 16GB (4 x 4GB) DDR3 2133 
Hard DriveCoolingCoolingOS
SAMSUNG 840 Series 250GB XIGMATEK Dark Knight II Night Hawk Edition  XSPC 360mm radiator, Raystorm CPU block, D5 pump Windows 10 
MonitorMonitorKeyboardPower
Samsung 2233RZ 22" 120hz QNIX QX2710 27" 100hz Logitech g710+ Corsair AX850  
CaseMouseMouse PadAudio
Corsair Vengeance Series C70 Military Green (Cu... Razer DeathAdder 3.5G Mouse Rug Bose Companion III's Speakers 
AudioAudio
Sennheiser HD 558 Headphones Sennheiser HD 6XX Headphones 
CPUMotherboardGraphicsRAM
Intel 4710MQ Stock OEM Asus laptop board? Nvidia GTX860M 12GB DDR3L  
Hard DriveOptical DriveOSMonitor
Crucial M550 256GB SSD 750GB HDD 7200rpm Windows 8.1 17.3" IPS display (LGD046C) 
  hide details  
Reply
M1 Abrams
(18 items)
 
Asus G53
(0 items)
Asus G771
(8 items)
 
CPUMotherboardGraphicsRAM
i7 3930K Asus Sabertooth X79 Geforce GTX 780 EVGA SC 3GB + XSPC Waterblock Patriot Viper 3 16GB (4 x 4GB) DDR3 2133 
Hard DriveCoolingCoolingOS
SAMSUNG 840 Series 250GB XIGMATEK Dark Knight II Night Hawk Edition  XSPC 360mm radiator, Raystorm CPU block, D5 pump Windows 10 
MonitorMonitorKeyboardPower
Samsung 2233RZ 22" 120hz QNIX QX2710 27" 100hz Logitech g710+ Corsair AX850  
CaseMouseMouse PadAudio
Corsair Vengeance Series C70 Military Green (Cu... Razer DeathAdder 3.5G Mouse Rug Bose Companion III's Speakers 
AudioAudio
Sennheiser HD 558 Headphones Sennheiser HD 6XX Headphones 
CPUMotherboardGraphicsRAM
Intel 4710MQ Stock OEM Asus laptop board? Nvidia GTX860M 12GB DDR3L  
Hard DriveOptical DriveOSMonitor
Crucial M550 256GB SSD 750GB HDD 7200rpm Windows 8.1 17.3" IPS display (LGD046C) 
  hide details  
Reply
post #110 of 154
Quote:
Originally Posted by Slaughtahouse View Post

So the computer had received the virus from a USB drive and then began to communicate to others using high frequency sounds?

How does a computer read or take these frequencies? Do they have to have a mic on? Or can the sound be absorbed by the speakers? Makes no sense to me.

Here this should help you understand what is happening:

Source
 
Test Rig
(14 items)
 
 
CPUMotherboardGraphicsRAM
Q6600 ASUS P5N-T EVGA GT 430 Patriot PDC24G6400ELK 
Hard DriveOptical DriveCoolingCooling
Western Digital Caviar Blue 1 TB LG Blu Ray/HD DVD Enzotech SCW-REV.A Swiftech MCR320-QP-K x2 
OSMonitorKeyboardPower
Windows7 Proffesional 64bit Acer 23" LCD Logitech G15 Corsair GS600 
CaseMouse
NZXT Phantom White Custom Mods Logitech G5 
CPUMotherboardGraphicsRAM
2500K ASUS P8P67 EVO Calibre GTX 480 Corsair Vengence 
Hard DriveOptical DriveCoolingOS
Vertex 2 LG DVD What ever is being tested Windows 7 professional 64bit 
MonitorKeyboardPowerCase
Acer 23" Generic High Power Astro PT 700w Antec 900/TBD 
MouseMouse Pad
ooold Microsoft POS Wood 
CPUMotherboardGraphicsRAM
3770K Gigabyte G1.Sniper 3 SLI GTX Titans Samsung Green 30nm 16GB 
Hard DriveHard DriveCoolingOS
Vertex 3 240GB raid0 WD Caviar Black 1TB Dual Loop Water Cooling Windows7 
MonitorMonitorKeyboardPower
Achieva Shimian 27" 1440p Acer 23" 1080p Razer Blackwidow Ultimate Mech Enermax Max Revo 1350 
CaseMouseMouse PadAudio
Enermax Fulmo GT Razer Naga EVGA Titan pad Logitec 5.1 
  hide details  
Reply
 
Test Rig
(14 items)
 
 
CPUMotherboardGraphicsRAM
Q6600 ASUS P5N-T EVGA GT 430 Patriot PDC24G6400ELK 
Hard DriveOptical DriveCoolingCooling
Western Digital Caviar Blue 1 TB LG Blu Ray/HD DVD Enzotech SCW-REV.A Swiftech MCR320-QP-K x2 
OSMonitorKeyboardPower
Windows7 Proffesional 64bit Acer 23" LCD Logitech G15 Corsair GS600 
CaseMouse
NZXT Phantom White Custom Mods Logitech G5 
CPUMotherboardGraphicsRAM
2500K ASUS P8P67 EVO Calibre GTX 480 Corsair Vengence 
Hard DriveOptical DriveCoolingOS
Vertex 2 LG DVD What ever is being tested Windows 7 professional 64bit 
MonitorKeyboardPowerCase
Acer 23" Generic High Power Astro PT 700w Antec 900/TBD 
MouseMouse Pad
ooold Microsoft POS Wood 
CPUMotherboardGraphicsRAM
3770K Gigabyte G1.Sniper 3 SLI GTX Titans Samsung Green 30nm 16GB 
Hard DriveHard DriveCoolingOS
Vertex 3 240GB raid0 WD Caviar Black 1TB Dual Loop Water Cooling Windows7 
MonitorMonitorKeyboardPower
Achieva Shimian 27" 1440p Acer 23" 1080p Razer Blackwidow Ultimate Mech Enermax Max Revo 1350 
CaseMouseMouse PadAudio
Enermax Fulmo GT Razer Naga EVGA Titan pad Logitec 5.1 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Technology and Science News
Overclock.net › Forums › Industry News › Technology and Science News › [ARS] Meet “badBIOS,” the mysterious Mac and PC malware that jumps airgaps