Do you still think that your data is safe because your computer is not connected to the internet or network? Yes? You are wrong because some security researchers have recently demonstrated that sound of your computer’s hard drive can be used to transmit data from a well-protected machine.
The DiskFiltration hack demonstrated in the video below by Mordechai Guri, works by controlling actuator in hard drive which moves back and forth across the drive’s platters to read and write data.
How DiskFiltration hack works
Think of it as the arm on a record player, but constantly moving back and forth at tremendous speeds.
“As the actuator jumps around, it produces subtle sounds. You know that cacophony of sounds when you first boot up a desktop computer? Part of that noise is coming from the machine’s hard drive, and with the correct malware installed, those sounds can actually leak sensitive data to a nearby air-gapped device, like a smartphone, that knows what to listen for.” reported by Gizmodo
The DiskFiltration hack has a working range of about six feet, but it is limited to a slow data rate of about 180bits per minute. That transfer rate is enough to capture complex encryption key in about 25minutes. For larger files, this method is mostly impractical and it also doesn’t work on SSDs because they don’t have any spinning part inside.