- Researchers at Shandong University have demonstrated a new covert data exfiltration technique called TrojPix.
- The method uses imperceptible pixel modulation to turn a monitor’s video cable into a radio transmitter, achieving speeds up to 8.1 Mbps.
- This technique requires pre-installed malware but no admin rights or hardware changes, posing a significant threat to air-gapped systems.
- Countermeasures are physical, such as using fiber-optic cables or shielding, as the electromagnetic emission itself cannot be patched.
Researchers at Shandong University have unveiled a novel method for stealing data from isolated computers, according to a report published on July 6, 2026. Their technique, called TrojPix, covertly transmits information by manipulating on-screen pixels to generate a faint radio signal from the video cable.
However, this method only functions after malware is already installed on the target machine. Consequently, it serves as an exfiltration channel rather than an initial infection vector, capable of moving files at a peak rate of 8.1 Mbps.
This speed, roughly a megabyte per second, allows a 100 MB file to be stolen in under two minutes. Meanwhile, the signal can be received up to 208 meters away under ideal laboratory conditions.
Real-world effectiveness is limited by walls, shielding, and environmental noise. The researchers detail that their “imperceptible pixel modulation” requires no administrator privileges and works across nine monitor brands and fifteen cable types.
Two concealment methods are employed: faking a powered-off display or hiding the signal within normal screen content. This approach builds upon long-established research into compromising emanations, known as TEMPEST.
Previous work like TEMPEST-LoRa achieved lower speeds and range. Unlike attacks using a planted hardware implant, TrojPix avoids any physical hardware modifications.
You cannot patch away the underlying electromagnetic emission. Effective countermeasures are therefore physical, such as using fiber-optic video links or TEMPEST-rated shielding for sensitive facilities.
✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
