TrojPix covertly exfiltrates data from air-gapped PCs via video emissions

Intelligence Summary

Researchers at Shandong University describe TrojPix, a technique that leaks data from air-gapped computers. The malware alters subtle on-screen pixels that are difficult for humans to notice. Those pixel patterns cause faint radio emissions along the connected video cable. A nearby receiver can decode the emissions to reconstruct exfiltrated information. Because the method requires malware already executing on the target, it mainly increases risk after an initial compromise.

Recommended Action

Review affected assets, schedule urgent remediation, and monitor related indicators.

Topics