Your 'Secure' Offline Computer Can Now Leak Data via Radio Waves

Air-gapped computers are supposed to be ultra-secure because they're not connected to the internet or any network. Governments and companies use them to protect secrets like encryption keys, confidential files, and biometric data. The idea is that if there's no connection, hackers can't reach the data. But a new study shows that's not entirely true.

Researchers have demonstrated that malware on an air-gapped computer can generate radio signals directly from the computer's RAM (memory). These signals can be picked up from a distance using cheap, off-the-shelf hardware—a simple antenna and a software-defined radio (SDR), which is a device that can receive and decode radio waves. The malware encodes sensitive information into the radio signals, which an attacker can then decode back into binary data. This means files, keystrokes, and even encryption keys can be stolen from a machine that was thought to be completely isolated.

The attack works at a speed of 1000 bits per second, which is fast enough to leak small amounts of data continuously. For example, it could transmit passwords or encryption keys in seconds. The researchers also propose countermeasures to block these radio emissions, but the study highlights a fundamental vulnerability: any electronic device can unintentionally emit signals that leak information.

While this attack requires the computer to already be infected with malware and the attacker to be physically nearby, it's a reminder that security is never absolute. For most people, air-gapped computers are not part of daily life, but the research matters because it shows how creative attackers can be—and why we need to keep improving security for the most sensitive systems.