Researchers have demonstrated a novel attack called RAMBO that can extract sensitive data from air-gapped computers—systems physically isolated from networks—by converting RAM memory activity into covert radio signals. Malware on a compromised machine can modulate memory bus operations to transmit files, encryption keys, biometric data, and more. Using off-the-shelf software-defined radio (SDR) equipment and an antenna, attackers can intercept these signals from a distance and decode them into binary information. The method achieves data exfiltration speeds of up to 1000 bits per second, making it a practical threat to high-security environments. The paper also outlines countermeasures to detect and block such out-of-band communication attempts.
This research highlights the growing sophistication of side-channel attacks and underscores the need for layered defenses beyond traditional network isolation. Even in highly secure facilities, electromagnetic emissions from hardware can be exploited. The study was submitted by Mordechai Guri and presented at a top-tier security venue, reflecting its significance in the field of hardware-based threat mitigation.
Source: Hacker News · Summarized by HeadlinesBriefing