We have completed maintenance on DiscoverMagazine.com and action may be required on your account. Learn More

Hackers Could Use Light to Steal Information Via Security Cameras

By Carl Engelking
Sep 21, 2017 9:48 PMNov 20, 2019 3:06 AM


Sign up for our email newsletter for the latest science news

(Credit: Shutterstock) Where there’s a will, there’s a way, and hackers have plenty of will and countless ways to attack a secure network—even if it’s not connected to the internet. In the latest demonstration proving no network is safe, researchers at Ben-Gurion University of the Negev used security cameras equipped with night vision to send and receive data from a network that wasn’t even connected to the internet. Firewalls, intrusion detection and prevention systems…

Jumping the Gap

Organizations with internet-connected networks use a host of security software to keep nefarious hackers out of the network. But for even greater security, firms and government entities set up “air-gap” networks that aren’t physically connected to the web. Though hackers need to be a little more creative, these networks are still quite vulnerable. As a first step, a hacker needs to embed malware into an air-gap network. This could be accomplished by using a malicious insider, or simply selling a USB with malware loaded on it. In 2008, for example, Ben-Gurion researchers say a United States military network was compromised after a foreign intelligence agency supplied infected thumb drives to retail kiosks near NATO headquarters in Kabul, Afghanistan. Once malware plants itself in an air-gap system, hackers' next step is to set up a channel of communication. And that’s where the security cameras come in. Security cameras use infrared LEDs to see at night, and the researchers used this simple function to send and receive data to a white-hat (good guy) hacker standing in a parking lot in one demonstration. Computers rely on a binary code of 1s and 0s, so researchers used a malware program that flashed a security camera’s infrared LEDs on and off at specified intervals to relay binary signals that contained information about passwords, PIN codes and encryption keys—anything, really.

The process also worked in reverse. The researchers used infrared light beams while standing in the parking lot to flash commands into the camera, which were then decoded by the malware embedded in the system. Essentially, they established a two-way communication channel with a network that was "off the grid." Their illuminating findings were published earlier this week on the preprint server arXiv. This method of hacking networks is particularly troubling because many organizations that store sensitive information about customers have public parking lots. And further, infrared light is invisible to the naked eye, which makes it difficult for a passer-by or security guard to spot nefarious behavior.

No Network Is Entirely Secure

Exploiting the infrared lights on a security camera is just one of many ways hackers can breach air-gap networks. Their methods are at once villainous and downright ingenious. Hackers have used electromagnetic radiation from the computer screen and audio signals from a spinning hard drive or fan to generate binary messages and transmit data. In one attack, hackers designed malware that sends signals by blinking the caps-lock light into a camera. If it generates an optical, thermal, acoustic or electromagnetic signal, it can be used to relay information. It’s certainly troubling to see how vulnerable networks can be. Fortunately, there are folks like the team at Ben Gurion working hard to exploit those weaknesses and recommend fixes before the bad guys can.

1 free article left
Want More? Get unlimited access for as low as $1.99/month

Already a subscriber?

Register or Log In

1 free articleSubscribe
Discover Magazine Logo
Want more?

Keep reading for as low as $1.99!


Already a subscriber?

Register or Log In

More From Discover
Recommendations From Our Store
Shop Now
Stay Curious
Our List

Sign up for our weekly science updates.

To The Magazine

Save up to 40% off the cover price when you subscribe to Discover magazine.

Copyright © 2024 Kalmbach Media Co.