New malware able to transmit data through hard drive sounds

[Godlygamer23]

As it stands, malware is very versatile and always changing. Security software has to be constantly updated and improved in order to be effective enough to protect users from anything that might come their way. Well, it looks like we're adding another one to the list. This malware is known as DiskFiltration which is able to use a nearby device to pick up sounds from a hard drive(aka, you need to have a microphone in order for this to actually work, and once that is sensitive enough to pick up hard drive noises coming from your chassis, which is not really possible all the time).

 

From the paper that researchers put information into, they stated this: "Malware installed on a compromised machine can generate acoustic emissions at specific audio frequencies by controlling the movements of the HDD's actuator arm." With the manipulation of the arm that reads/writes data from/to the platters, it's been shown that a code can be relayed to any malicious devices nearby that are designed to pick up the code in audio form.

 

This is similar to Fansmitter where fans could be used to transmit certain data. But I guess you're protected from it if you have your fans controlled by a fan controller that is not connected to the system in any way except the power supply. I can only see that being used as a marketing term for a pre-built PC someone is trying to sell.

 

That being said, both Fansmitter and DiskFiltration require the machine to already be compromised, and as mentioned at the outset, you also need to have an intercepting device, which I imagine would also need to be compromised already as well, which makes this malware extremely difficult to actually use. Another thing that's very limiting is the amount of data that can be transferred per second, which is only 180 bits per minute. However, it could be used to transfer things like passwords. Since SSDs do not make any rotational noises at all due to how they function, users of SSDs do not have to worry about this malware, although I'm guessing no one really does. But it does show what's possible.

 

You can find the video below with the researchers demonstrating how it works:

 

As for my source:

http://www.sciencealert.com/this-new-hack-makes-your-pc-leak-sensitive-information-via-noises-from-the-hard-drive

 

[laminutederire]

That's more something like secret services would use to target very specific people!

[ThinkWithPortals]

Everyone, quick, switch to SSDs!

 

/s

[Tech_Dreamer]

**Looks suspiciously at the case**

[Godlygamer23]

2 minutes ago, ThinkWithPortals said:

Everyone, quick, switch to SSDs!

 

/s

Unless malware can be used to use electrical noise purely to gather data. If it's loud enough anyways.

[RollinLower]

another reason to join the SSD masterrace

still though, this is absolutely terrifying! how the hell are you going to protect yourself from attacks like these? 

[Murasaki]

8 minutes ago, Tech_Dreamer said:

**Looks suspiciously at the case**

Mine would be a perfect candidate. The drive bays are so bad you can feel the vibrations by touching the desk. And they're perfectly audiable. That's why I have a HDD mounted on the bottom. The malware can probably make music with the vibrations like some old floppy drive.

[Godlygamer23]

Just now, RollinLower said:

another reason to join the SSD masterrace

still though, this is absolutely terrifying! how the hell are you going to protect yourself from attacks like these? 

Considering you need to have two devices compromised(assuming the host machine has no connection to the Internet), and one of them needs to be connected to the Internet, I find it very unlikely for anyone to be affected by the malware.

[Godlygamer23]

Just now, ModuleLFS said:

Mine would be a perfect candidate. The drive bays are so bad you can feel the vibrations by touching the desk. And they're perfectly audiable. That's why I have a HDD mounted on the bottom. The malware can probably make music with the vibrations like some old floppy drive.

A new genre of music consisting strictly of hard drive clicks and platter spins.

[NinjaJc01]

3 minutes ago, RollinLower said:

another reason to join the SSD masterrace

still though, this is absolutely terrifying! how the hell are you going to protect yourself from attacks like these? 

Sound insulation? PC in the next room?

[DannyRyu]

Pffft Who needs expensive ass SSD's. Floppy drives any one?

[Sir Asvald]

HDD: Vibrating intensifies 

HDD 2: What's going on buddy?

HDD: THEY ARE STEALING MY SOUL!

DARTH VADER: NOOOOOOOOOOOOOOOOOOOOOOOOOO!

[ShadowCaptain]

wow so SSDs are now a security measure

[PRTI]

2 minutes ago, ShadowCaptain said:

wow so SSDs are now a security measure

Next virus gen

 

Transfers your info to there brain

[SImoHayha]

What the devil how does that even work?! Hard Drive Noises trasmitting data? That sounds incredibly intriguing.

 

But then again am quite intrigued on how we even managed to create a motherboard and give instructions to a motherboard, then somehow make a CPU with more instructions then how to make those instructions to visual/audio. Then ETC AND ETC. 

[rattacko123]

7 minutes ago, keNNySOC said:

Next virus gen

 

Transfers your info to there brain

Malware transmits data using brain vibrations

[SageOfSpice]

Seems kind of dumb.

If you can get into the network in the first place and compromise a system, then you already have complete access to the information. That's just a lot of extra work for no real tangible benefit, it takes longer, and it's more likely to be noticed.

[TetraSky]

data rate is simply too slow for this to even be worth it.

[PRTI]

Just now, rattacko123 said:

Malware transmits data using brain vibrations

I mean literally brain,they put a database with 2PB of pure SSD's in there brain,put a virus into your PC and start transmitting data from your PC to there brain and then they stole all of your twinkies

[rattacko123]

3 minutes ago, TetraSky said:

data rate is simply too slow for this to even be worth it.

passwords can be transmitted easily through this method due to their low file size

[Katsunaka]

Good thing my PC is basically SSDs now. 

 

Although the drawback is, PC's are becoming so powerful that small malware programs could run and not affect performance.

[Linus_torvalds]

At what speeds? 1 bit per second? LOL

And what if there are 2 drives in PC or in the room?

[FPSwithaWacomTablet]

Inb4 NSA starts using coil whine to spy on people... Now no one is safe  

 

Either that or systemd is forcefully designed to spy on people...

 

/tinfoil hat activated

[elfensky]

2 hours ago, Godlygamer23 said:

A new genre of music consisting strictly of hard drive clicks and platter spins.

Remind me of the Floppy drive dude...

 

 

[TheRandomness]

 

2 hours ago, RollinLower said:

another reason to join the SSD masterrace

still though, this is absolutely terrifying! how the hell are you going to protect yourself from attacks like these? 

By dipping your HDD in concrete