Hackers Can Use HDMI Cables to Capture Your Passwords


Security researchers have discovered a new way that hackers can steal sensitive information, like passwords. This involves eavesdropping on HDMI cables, a concerning development for computer users.

The technique, detailed in a recent study by researchers at Universidad de la República in Uruguay, uses artificial intelligence to decode electromagnetic emissions from HDMI connections and reconstruct what’s displayed on a computer screen.

EHA

How to Build a Security Framework With Limited Resources IT Security Team (PDF) - Free Guide

The researchers found they could capture the electromagnetic radiation emitted by HDMI cables using readily available software-defined radio equipment. By applying deep learning algorithms to analyze these captured signals, they could reconstruct text and images from a computer display with up to 70% accuracy.

Hackers Can Use HDMI Cables to Capture Your Passwords
proposed system

“This level of accuracy is often sufficient for an attacker to comprehend passwords, sensitive data, or even encrypted communications displayed on a screen,” explained lead researcher Federico Larroca. The team’s AI system improved on previous eavesdropping attempts, reducing character error rates by over 60 percentage points.

While similar vulnerabilities were known for older CRT monitors, the complex digital signaling used by modern HDMI connections was thought to make such attacks impractical. This new research demonstrates that AI can overcome those obstacles, potentially putting millions of computer users at risk.

Hackers Can Use HDMI Cables to Capture Your Passwords
Enumeration Setup

The good news is that executing such an attack requires significant technical expertise and specialized equipment. The researchers believe average home users are unlikely to be targeted. However, they warn that government agencies or corporations could be at higher risk from sophisticated attackers.

“It’s likely that similar techniques are already being used by advanced hackers or state-level actors,” Larroca cautioned. “An attacker could potentially capture HDMI emissions from outside a building using equipment hidden in a nearby vehicle.”

To protect against this threat, cybersecurity experts recommend being aware of your surroundings when working with sensitive information, especially near windows or in public spaces. Using encrypted connections and avoiding displaying passwords on external monitors connected via HDMI may also help mitigate risks.

The researchers have open-sourced their findings to help improve defensive measures. As the cybersecurity landscape continues to evolve, this discovery serves as a reminder of the importance of staying vigilant about emerging threats to digital privacy and security.

Are you from SOC and DFIR Teams? – Analyse Malware Incidents & get live Access with ANY.RUN -> Free Access



Source link