NaughtyMag: Making Air-gapped MacBook Wink Its Data Away - by Adhokshaj Mishra

Описание: Speaker: Adhokshaj Mishra, Staff Detection Engineer - Linus Agent

Air-gapped computers are common in higher security facilities where potential compromise may lead to loss of life (e.g medical facilities / equipment getting compromised), leakage of sensitive information (e.g. defence), etc. Since these computers cannot be reached via conventional attack vectors due to lack of network access, attackers and security researchers have turned their attention towards novel techniques which can still allow leakage of information over covert channels, which can cross the "air-gap" and eventually transmit data to the outer world.

This talk presents one such attack vector, which uses an LED indicator present on Apple MagSafe charger cables as a mechanism to leak sensitive data, which can be picked by a video recording device (a normal camera, webcam, monitoring cameras, etc.). The recorded video can then be processed further to extract the leaked information. The talk will present the motivation behind this work, a basic overview of MagSafe (from the charger's POV as well as MacBook's POV), its control mechanisms, data leakage and extraction methods. In the end, the challenges and limitations of the presented mechanism are also discussed.

For more information about Infosec In the City, SINCON https://www.infosec-city.com/