Oktacron - Cyber Security RSS Feeds History

Side Eye attack: Eavesdropping through video stabilization | Kaspersky official blog

kaspersky Oct 19, 2023 Business

Researchers from two universities in the U.S. recently published a paper examining the Side Eye attack — a way to extract audio data from smartphone video. Theres a rather obscure thing wed like to clarify here. When you record a video on your phone, naturally, both the image and the accompanying audio are captured. show more ...

The authors attempted to find out whether sound can be extracted from the image even if, for some reason, the source lacks an actual audio track. Imagine a video recording of a conversation between two businessmen, posted online with the sound pre-cut to preserve the privacy of their discussions. It turns out that its possible, albeit with some caveats, to reconstruct speech from such a recording. This is due to a certain feature of the optical image stabilization system integrated into most of the latest generation smartphones. Optical stabilization and the side-channel attack Optical stabilizers provide higher-quality images when shooting videos and photos. They smooth out hand tremors, camera shake while walking, and similar undesirable vibrations. For this stabilization to work, the manufacturers ensure that the cameras sensor is movable relative to the lens. Sometimes the lenses within the camera itself are also made movable. The general idea of optical stabilization is illustrated in the image below: when motion sensors in a smartphone or camera detect movement, the matrix or lens in the camera moves so that the resulting image remains steady. In this way, most small vibrations dont affect the final video recording. Diagram of the optical image stabilization system in modern cameras. Source Understanding exactly how such stabilization works isnt necessary. The important thing is that the camera elements are movable relative to each other. They can shift when necessary — aided by miniature components known as actuators. However, they can also be moved by external vibrations —such as those caused by loud sounds. Imagine your smartphone lying on a table near a speaker, recording a video (without sound!). If the speakers loud enough, the table vibrates, and along with it, the phone and these very components of the optical stabilizer. In the recorded video, such vibrations translate into microscopic shaking of the objects captured. During casual viewing, this trembling is completely unnoticeable, but it can be detected through careful analysis of the video data. Another problem arises here: a typical smartphone records video at a rate of 30, 60, or at best 120 frames per second. We only have that much opportunity to capture slight object shifts in the video — and its rather little. According to the Nyquist-Shannon sampling theorem, an analog signal (such as sound) of a given frequency can be reconstructed from measurements taken at twice that frequency. By measuring the shake of an image at a frequency of 60 hertz, we can at best reconstruct sound vibrations with a frequency of up to 30 hertz. However, human speech lies within the audio range of 300 to 3400 hertz. Its a mission impossible! But another feature of any digital camera comes to the rescue: the so-called rolling shutter. Each frame of video is captured not all at once, but line by line — from top to bottom. Consequently, when the last line of the image is digitized, fast-moving objects in the frame may already have shifted. This feature is most noticeable when shooting video from the window of a fast-moving train or car. Roadside posts and poles in such a video appear tilted, while in reality theyre perpendicular to the ground. Another classic example is taking a photo or video of a rapidly rotating airplane or helicopter propeller. The relatively slow reading of data from the camera sensor means that the blades have time to move before the frame is completed. Source Weve shown a similar image before — in this post about an interesting method of attacking smart card readers. But how can this rolling shutter help us analyze micro-vibrations in a video? The number of samples, meaning the frequency at which we can analyze the image, significantly increases. If video is recorded with a vertical resolution of 1080 pixels, this number needs to be multiplied by the number of frames per second (30, 60, or 120). So we end up being able to measure smartphone camera vibrations with much greater precision — tens of thousands of times per second, which is generally enough to reconstruct sound from the video. This is another example of a side-channel attack: when the exploitation of an objects non-obvious physical characteristics leads to the leakage of secrets. In this case, the leakage is the sound that the creators of the video tried to conceal. Difficulties in practical implementation But… not so fast, tiger. Lets not assume that, with this complex video signal processing, the authors of the study managed to restore clear and intelligible human speech. The graph on the left shows the original spectrogram of the audio recording, in which a person sequentially says zero, seven, and nine. On the right is the spectrogram of the sound restored from the video recording. Even here, its clear that there was significant loss in the restoration of the data. On the projects website, the authors have provided real recordings of both the original and restored speech. Check out the results to get a clear idea of the shortcomings of this sophisticated eavesdropping method. Yes, some sound can be reconstructed from the video — but its more just a kind of weird rattling than human speech. Its very difficult to guess which numeral the person is uttering. But even such heavily damaged data can be successfully processed using machine learning systems: if you give the algorithm known pairs of original and restored audio recordings to analyze, it can then infer and reconstruct unknown data. Restoring audio from video using the rolling shutter effect. Source The success of the algorithm is tested on relatively simple tasks — not on real-life human speech. The results are as follows: in almost 100% of cases, it was possible to correctly determine a persons gender. In 86% of cases, it was possible to distinguish one speaker from another. In 67% of cases, it was possible to correctly recognize which digit a person was naming. And this is under the most ideal conditions when the phone recording the video was placed 10 centimeters away from the speaker on a glass tabletop. Change the tabletop to wood, and the accuracy starts to decrease. Move the phone farther away — it gets even worse. Lower the volume to the normal level of a regular conversation, and the accuracy drops critically. Now, lets move on from theoretical considerations and try to imagine the real-life applications of the proposed scenario. We have to immediately exclude all eavesdropping scenarios. If a hypothetical spy with a phone can get close enough to the people having a secret conversation, the spy can easily record the sound with a microphone. What about a scenario where we record the people talking on a surveillance camera from a distance, and the microphone cannot capture the speech? In this case, we likewise wont be able to reconstruct anything from the video: even when the researchers moved the camera away from the speaker by three meters, the system basically didnt work (the numerals were correctly recognized in about 30% of cases). Therefore, the beauty of this study lies simply in finding a new side channel of information leakage. Perhaps it will be possible to somehow improve the proposed scheme in the future. The authors main discovery is that the image stabilization system in smartphones, which is supposed to eliminate video vibrations, sometimes carefully records them in the final video. Moreover, this trick works on many modern smartphones. Its enough to train the algorithm on one, and in most cases, it will be able to recognize speech from video recorded on another device. Anyway, if somehow this attack is dramatically improved, then the fact that it analyzes recorded video becomes critical. We can fantasize about a situation in the future where we could download various videos from the internet without sound and find out what the people near the camera were talking about. Here, however, we face two additional problems. It wasnt for nothing that the authors produced the speech from a speaker placed on the same table as the phone. Analyzing real human speech using this video eavesdropping method is much more complicated. Also, phone videos are usually shot handheld, introducing additional vibrations. But, you must agree, this is an elegant attack. It once again demonstrates how complex modern devices are, and that we should avoid making assumptions when it comes to privacy. If youre being filmed on video, dont rely on assurances that theyll change the audio track later. After all, besides machine learning algorithms, theres also the ancient art of lip reading.

Patch Now: APTs Continue to Pummel WinRAR Bug

darkreading Oct 19, 2023 Feed

State-sponsored cyber espionage actors from Russia and China continue to target WinRAR users with various info-stealing and backdoor malware, as a patching lag plagues the software's footprint.

Tips for a Successful SecOps Game Plan

darkreading Oct 19, 2023 Feed

Dark Reading's special report on SecOps data analytics looks at the elements needed to set up a proper data foundation — because getting the data right when collecting, aggregating, and analyzing it is essential.

23AndMe Hacker Leaks New Tranche of Stolen Data

darkreading Oct 19, 2023 Feed

Two weeks after the first data leak from the DNA ancestry service, the threat actor produces an additional 4 million user records they purportedly stole.

The Trifecta of Consumer Data Privacy: Education, Advocacy & Accountability

darkreading Oct 19, 2023 Feed

It's time to build a culture of privacy, one that businesses uphold.

AI-Powered Israeli 'Cyber Dome' Defense Operation Comes to Life

darkreading Oct 19, 2023 Feed

The Israelis are building a cyber defense system that will use ChatGPT-like generative AI platforms to parse threat intelligence.

Iran-Linked 'MuddyWater' Spies on Mideast Gov't for 8 Months

darkreading Oct 19, 2023 Feed

The state-sponsored threat actors (aka APT34, Crambus, Helix Kitten, or OilRig) spent months seemingly taking whatever government data they wished, using never-before-seen tools.

Why Do We Need Real-World Context to Prioritize CVEs?

darkreading Oct 19, 2023 Feed

Without the proper context, organizations waste time mitigating software flaws that won't likely affect their systems.

North Korean State Actors Attack Critical Bug in TeamCity Server

darkreading Oct 19, 2023 Feed

Known threat groups Diamond Sleet and Onyx Sleet focus on cyber espionage, data theft, network sabotage, and other malicious actions, Microsoft says.

Q&A: The Outlook for Israeli Cyber Startups, As War Clouds Gather

darkreading Oct 19, 2023 Feed

Amid the burgeoning war, Israel's tech sector is focused on resilience. Ofer Schreiber, senior director at YL Ventures, weighs in on the conflict, funding for cybersecurity startups, overblown valuations, and what the future holds.

Europol Strike Wounds Ragnar Locker Ransomware Group

darkreading Oct 19, 2023 Feed

Several countries in Europe as well as the United States and Japan were involved in the operation, which is aimed at defanging one of the bigger names in ransomware.

Hacker Leaks Millions of New 23andMe Genetic Data Profiles

cyware Oct 19, 2023 Breaches and Incidents

A hacker has leaked 4.1 million stolen genetic data profiles from 23andMe, a DNA testing company, on a hacking forum. This follows a recent leak of 1 million profiles of Ashkenazi Jews.

Report: Global Economy Could Lose $3.5 Trillion in Systemic Cyberattack

cyware Oct 19, 2023 Trends, Reports, Analysis

A hypothetical cyberattack on a major financial services payment system could result in global economic losses of up to $3.5 trillion over a five-year period. The United States, China, and Japan are the countries most at risk.

Eastern European Energy and Defense Firms Targeted With MATA Backdoor

cyware Oct 19, 2023 Malware and Vulnerabilities

The attackers employed sophisticated techniques, including exploiting a vulnerability in Internet Explorer and using specialized malware modules for data exfiltration, highlighting the increasing complexity of targeted attacks.

Moldovan Accused of Running Cybercrime Marketplace to Face Charges in US

cyware Oct 19, 2023 Incident Response, Learnings

The marketplace, which used an online payment system called Perfect Money, offered illicit cryptocurrency exchange services and listed credentials belonging to 350,000 devices for sale globally.

Henry Schein Provides Information on Cybersecurity Incident

cyware Oct 19, 2023 Breaches and Incidents

Henry Schein, Inc. experienced a cybersecurity incident that temporarily disrupted some of its business operations but did not impact its clients' practice management software.

Finland Charges Psychotherapy Hacker With Extortion

cyware Oct 19, 2023 Incident Response, Learnings

A hacker in Finland has been charged with over 21,000 counts of extortion for stealing psychotherapy patient records and attempting to extort money from a therapy center.

Google Play Protect Bolsters Security Against Malicious Apps

cyware Oct 19, 2023 Mobile Security

Google has announced a significant update to its Google Play Protect feature in response to the increasing threats targeting mobile devices. It includes real-time code-level scanning during the installation process to counter evasion techniques.

Ukrainian Hacktivists Claim Trigona Ransomware Takedown

cyware Oct 19, 2023 Malware and Vulnerabilities

Pro-Ukrainian hackers known as the Ukrainian Cyber Alliance claim to have wiped out the servers of the Trigona ransomware gang, a group linked to the Russian cybercriminal underground.

Darwinium Raises $18 Million for Edge-Based Fraud Prevention Tech

cyware Oct 19, 2023 Companies to Watch

San Francisco-based startup Darwinium has raised $18 million in a Series A funding round led by U.S. Venture Partners. The company, which focuses on fraud prevention, has developed a digital security platform that runs on the perimeter edge.

Government-Backed Actors Exploiting WinRAR Vulnerability

cyware Oct 19, 2023 Malware and Vulnerabilities

The recent campaigns targeting various sectors, including the energy and government sectors, highlight the effectiveness of known vulnerabilities even with available patches, emphasizing the importance of proactive software security measures.

North Korean Hackers Exploiting Critical Flaw in DevOps Tool

cyware Oct 19, 2023 Threat Intel & Info Sharing

The vulnerability allows attackers to execute arbitrary code on the server, potentially leading to the theft of source code and private keys. TeamCity is used by many high-profile organizations, making it an attractive target for hackers.

Former Navy IT Manager Sentenced to Prison for Hacking, Selling PII

cyware Oct 19, 2023 Incident Response, Learnings

The IT manager and his wife stole the personally identifiable information of over 9,000 individuals and sold it for $160,000 in Bitcoin, which was later used for criminal activities.

Californian IT Company DNA Micro Leaks Private Mobile Phone Data of Over 820,000 Customers

cyware Oct 19, 2023 Breaches and Incidents

The leaked data poses serious risks, as threat actors could potentially disrupt services, launch phishing campaigns, and engage in "doxxing" and "swatting" activities, putting customers at risk.

UK Warns Nuclear Power Plant Operator of Cybersecurity Failings

cyware Oct 19, 2023 Govt., Critical Infrastructure

EDF, the company operating nuclear power plants in the UK, is facing increased regulatory attention after an inspection of its cybersecurity practices. The company failed to provide a comprehensive cybersecurity improvement plan.

New Campaign by Iranian APT Group Targets Middle Eastern Government

cyware Oct 19, 2023 Breaches and Incidents

The attackers made use of legitimate tools like Plink to configure port-forwarding rules, enabling remote access via the Remote Desktop Protocol (RDP), and modified Windows firewall rules to facilitate their activities.

Lost and Stolen Devices: A Gateway to Data Breaches and Leaks

cyware Oct 19, 2023 Expert Blogs and Opinion

To mitigate the risk, organizations should implement strategies such as employee training, geolocation and geofencing, endpoint data encryption, and secure storage solutions.

BlackCat Group Adopts a New Tactic to Circumvent Security Solutions

cyware Oct 19, 2023 Malware and Vulnerabilities

The BlackCat ransomware group has introduced a new evasion tool called Munchkin, distributed as an ISO file, allowing them to run ransomware on remote machines. The controller malware is written in Rust and resembles the BlackCat malware family. Organizations are recommended to leverage the updated IOCs associated with the malware to stay safe.

Hacker Leaks Millions More 23AndMe User Records On Cybercrime Forum

packetstormsecurity Oct 19, 2023 headline,hacker,privacy,data loss

There's A New Way To Flip Bits In DRAM

packetstormsecurity Oct 19, 2023 headline,flaw

You Need To Update WinRAR, Right Now

packetstormsecurity Oct 19, 2023 headline,hacker,flaw,patch