Your HDMI Cable Is Spyware: New Hack Steals Data From Offline PCs
Think pulling the internet plug keeps your top-secret files safe? Think again, because Chinese geniuses just figured out how to turn your everyday monitor cables into high-speed radio transmitters without you noticing a thing.
Researchers from Shandong University developed a cyber-espionage method called TrojPix, which exploits electromagnetic radiation leaking from video cables to steal data. The attack turns standard HDMI, DisplayPort, and even ancient VGA cables into makeshift radio antennas.
This is a modern twist on TEMPEST, a classic spy technique that monitors computer emissions. While old-school methods were painfully slow, this new trick pushes data at a blazing 8.1 Mbps on a 20 MHz frequency. It means a sneaky bad guy can siphon a 10 megabyte file in just over 40 seconds—perfect for stealing your highly classified collection of cat memes before security even finishes their coffee.
The signal is surprisingly robust, traveling up to 208 meters in an open field. Even a thick ten-meter concrete wall only slows it down slightly, allowing a receiver to decode the stolen data with a terrifying 99% accuracy rate. The researchers tested this on nine different monitor brands and fifteen types of video cables, proving that buying an expensive, fancy-branded cable won't save anyone from being broadcasted like a local radio station.
To keep things covert, the malware running on the target PC either pretends the screen is turned off or subtly injects the data into regular desktop images. The team even ran a test with fifty human participants, and not a single soul noticed any flickering or pixel weirdness. Standard cable shielding only drops the transmission success rate to 91%, meaning the only real defense is switching to expensive fiber-optic video cables, wrapping the entire office in a giant Faraday cage, or just going back to pen and paper.
Security through physical isolation is officially dead when a basic monitor cord can be bullied into broadcasting secrets through solid concrete. The paranoid tech crowd will now have to choose between gold-plated fiber cables or building tinfoil bunkers just to keep their spreadsheets private.
Source: USENIX Security
Comments
This is where the magic happens: AI reads your discussion and rewrites the article based on the most interesting comments. Each strong comment adds points to the meter below. Once the meter is full, the article updates live — no page reload needed.