Researchers from Ben-Gurion University of Israel have developed a new technique for stealing data from computers operating in isolated environments using smartwatches. According to NotebookCheck, the cyberattack method called SmartAttack allows for the transmission of sensitive information via ultrasonic signals in the range of 18–22 kHz that are inaudible to the human ear.
The essence of the attack lies in the fact that an infected computer encodes information into an ultrasonic signal, which is then transmitted to the microphone of the smartwatch. The device then forwards the data via Wi-Fi or Bluetooth, bypassing the physical isolation of the computer. Since smartphones are often prohibited in secure areas, and smartwatches are less regulated and typically worn on the user's wrist, their use proves practical for such an attack.
During experiments, information was successfully transmitted over distances of up to 6 meters at a rate of 50 bits per second. Although the method requires both the infection of the computer and the physical presence of the watch, researchers warn that the risks are significant for organizations relying on physical isolation as the main form of protection.
This research calls for a review of policies regarding wearable devices in high-security areas.
