High Frequency Audio Computer Monitors May Expose Screen Activity

September 3, 2018

Written by wukovits

high frequency audio computer monitors may expose screen activityIt may sound like something straight out of a science fiction movie, but recently, researchers have made a disturbing discovery. Using nothing more than an off-the-shelf microphone, it’s possible for an attacker to determine what content you’re viewing on your computer monitor.

The researchers tested a variety of LCD screens (with both LED and CCFL backlighting) and observed that the high-pitched noise made by the monitors changed as the content displayed on the screen changed.

The research team tested a variety of methods of recording audio data from the monitors in question, and found that they could capture sufficient data with a few methods. First, a smartphone positioned near the screen, second a compromised smart virtual assistant (like Google Home or Amazon’s Alexa), and third, using a parabolic microphone from up to ten meters distant.

Even more disturbing, the researchers discovered that an attacker could correctly identify the website a victim was looking at with up to 97 percent accuracy if the microphone was close to the monitor, and with 90.9 percent accuracy with microphones placed at some distance.

Worst of all, subtle changes in the pitch of your display screen make it possible for hackers to identify what specific characters are being displayed with an accuracy that ranged from 88 percent (more distant microphones) to 98 percent (microphones in close proximity to the monitor). This makes it entirely possible to glean passwords and other sensitive information.

Granted, this is an extremely exotic form of attack that requires a great deal of advance preparation by the attacker. Because of this, it’s unlikely that it will see widespread use anytime soon. Even so, it’s something that a careful and determined hacker could do right now using off the shelf technology, and there’s very little the victim could do to prevent it.

While we’re unlikely to see equipment manufacturers take the necessary steps to mask acoustic emanations, robust on-site physical security measures would make detection of this type of attack fairly easy.

Used with permission from Article Aggregator

Bayou Tech

We provide solutions for your business. Find out how we can help.

Related Articles

Key Considerations for Effective Cybersecurity Implementation

Consider this: In the realm of cybersecurity, things often get tangled in the web of "you should do it anyway" arguments. Yet, for busy business owners bombarded with daily "must-dos," deciphering the essentials from the fluff can feel like a cyber maze. We aim to...

Major Cyber Attack at OMV

Louisiana’s Office of Motor Vehicles (OMV) is one of a still undetermined number of government entities, major businesses, and organizations to be affected by an unprecedented Data Breach.There is no indication at this time that cyber attackers who breached MOVEit...