Pixhell Attack: Leaking Info from Air-Gap Computers via 'Singing Pixels'

The PIXHELL attack, presented by Mordechai Guri, reveals a new method for leaking sensitive information from air-gapped computers without the need for audio hardware. Traditionally, air-gapped systems are isolated from networks to protect sensitive data, but attackers can exploit sound from speakers to exfiltrate information. The PIXHELL attack circumvents this by using the noise generated by the pixels on a screen, allowing malware to create specific pixel patterns that emit sound frequencies between 0 and 22 kHz. This method utilizes the electromagnetic noise produced by the screen's components, enabling the transmission of sensitive data over distances of up to 2 meters. The paper discusses the attack model, technical background, and implementation details, including bitmap generation and the modulation/demodulation process. It also addresses evasion techniques, such as using low-brightness patterns that resemble turned-off screens, and proposes countermeasures to mitigate this threat. The findings highlight the vulnerabilities of air-gapped and audio-gapped systems, emphasizing the need for enhanced security measures.

- The PIXHELL attack leaks data from air-gapped computers using screen-generated sound.

- It operates without audio hardware, exploiting electromagnetic noise from screen components.

- Sensitive information can be transmitted over distances of up to 2 meters.

- The attack employs low-brightness patterns to evade detection.

- Countermeasures are proposed to protect against this type of data exfiltration.