New Method for Data Theft from Isolated Computers

Researchers from Israel's Ben-Gurion University have uncovered a novel method for stealing data from computers operating in isolated environments (air-gapped) using smartwatches. According to NotebookCheck, the cyber attack method, termed SmartAttack, enables the transmission of confidential information via ultrasonic signals — frequencies in the 18–22 kHz range, which are inaudible to the human ear.

The essence of the attack is that the infected computer encodes information into an ultrasonic signal, which is then transmitted to the microphone of a smartwatch. The device subsequently sends the data via Wi-Fi or Bluetooth, bypassing the physical isolation of the computer. Since smartphones are often banned in secure areas, and smartwatches face fewer restrictions and usually remain on the user's wrist, their use proves practical for such an attack.

During experiments, data was successfully transmitted over distances up to 6 meters at a rate of 50 bits per second. Although the method requires both the infection of the computer and the physical presence of the watch, researchers warn that the risks are serious for structures relying on physical isolation as their main defense.

This study calls for a reassessment of policies regarding wearable devices in high-security areas.