TrojPix Technique Enables Data Exfiltration from Air-Gapped Systems

Researchers from Shandong University have developed a new method called TrojPix that allows data exfiltration from air-gapped computers by manipulating screen pixels to emit radio signals. This technique can achieve data transfer rates of up to 8.1 Mbps and can operate over distances of 208 meters, even through concrete walls. TrojPix requires malware on the target machine to function as an exfiltration channel. It does not necessitate administrator rights or hardware modifications, making it accessible for attackers. The method can disguise its signals by faking a powered-off display or embedding them within normal screen content. Countermeasures include using fiber-optic video links and preventing malware infections. The research indicates that TrojPix is significantly faster than traditional air-gap covert channels, which typically rely on USB drives for data transfer. The technique has been successfully demonstrated across various monitor brands and video cables.

Key Points: • TrojPix enables data exfiltration from air-gapped computers using screen pixels. • The technique can transmit data at speeds of 8.1 Mbps over distances up to 208 meters. • Countermeasures include fiber-optic video links and malware prevention.