{"id":9595,"date":"2023-10-12T19:57:02","date_gmt":"2023-10-13T02:57:02","guid":{"rendered":"https:\/\/mattfife.com\/?p=9595"},"modified":"2023-10-01T20:02:55","modified_gmt":"2023-10-02T03:02:55","slug":"near-ultrasonic-attacks-on-any-device","status":"publish","type":"post","link":"https:\/\/mattfife.com\/?p=9595","title":{"rendered":"Near-ultrasonic attacks on any device"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Just because you can&#8217;t hear it doesn&#8217;t mean your smart device can&#8217;t.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Researchers have developed a novel attack called &#8220;Near-Ultrasound Inaudible Trojan&#8221; (NUIT) that can launch silent attacks against devices powered by voice assistants. The main principle that makes NUIT effective and dangerous is that microphones in smart devices can respond to near-ultrasound that the human ear cannot, thus performing the attack with minimal risk of exposure while still using conventional speaker technology.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The team\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/sites.google.com\/view\/nuitattack\/home\" target=\"_blank\">demonstrated NUIT attacks<\/a>\u00a0against modern voice assistants found inside millions of devices, including Apple&#8217;s Siri, Google&#8217;s Assistant, Microsoft&#8217;s Cortana, and Amazon&#8217;s Alexa, showing the ability to send malicious commands to those devices.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Inaudible attacks<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">NUIT could be incorporated into websites that play media or YouTube videos and tricking targets into visiting sites or playing malicious media on trustworthy sites.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The researchers say the NUIT attacks can be conducted using two different methods.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NUIT-1, is when a device is both the source and target of the attack. For example, an attack can be launched on a smartphone by playing an audio file that causes the device to perform an action, such as opening a garage door or sending a text message.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The other method, NUIT-2, is when the attack is launched by a device with a speaker to another device with a microphone, such as a website or over TV to a smart speaker.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Just one more reason not to have a bunch of smart devices in your house.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe loading=\"lazy\" class=\"youtube-player\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/TUnPFR35AR4?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=en-US&#038;autohide=2&#038;wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\"><\/iframe><\/span>\n<\/div><\/figure>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe loading=\"lazy\" class=\"youtube-player\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/mFmS4vvL8ko?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=en-US&#038;autohide=2&#038;wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\"><\/iframe><\/span>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Article:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/inaudible-ultrasound-attack-can-stealthily-control-your-phone-smart-speaker\/amp\/\">https:\/\/www.bleepingcomputer.com\/news\/security\/inaudible-ultrasound-attack-can-stealthily-control-your-phone-smart-speaker\/amp\/<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Just because you can&#8217;t hear it doesn&#8217;t mean your smart device can&#8217;t. Researchers have developed a novel attack called &#8220;Near-Ultrasound Inaudible Trojan&#8221; (NUIT) that can launch silent attacks against devices powered by voice assistants. The main principle that makes NUIT effective and dangerous is that microphones in smart devices can respond to near-ultrasound that the human ear cannot, thus performing the attack with minimal risk of exposure while still using conventional speaker technology. The team\u00a0demonstrated NUIT attacks\u00a0against modern voice assistants&#8230;<\/p>\n<p class=\"read-more\"><a class=\"btn btn-default\" href=\"https:\/\/mattfife.com\/?p=9595\"> Read More<span class=\"screen-reader-text\">  Read More<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[9,5],"tags":[],"class_list":["post-9595","post","type-post","status-publish","format-standard","hentry","category-cool","category-technical"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4WECr-2uL","jetpack-related-posts":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/mattfife.com\/index.php?rest_route=\/wp\/v2\/posts\/9595","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mattfife.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mattfife.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mattfife.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/mattfife.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9595"}],"version-history":[{"count":1,"href":"https:\/\/mattfife.com\/index.php?rest_route=\/wp\/v2\/posts\/9595\/revisions"}],"predecessor-version":[{"id":9596,"href":"https:\/\/mattfife.com\/index.php?rest_route=\/wp\/v2\/posts\/9595\/revisions\/9596"}],"wp:attachment":[{"href":"https:\/\/mattfife.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9595"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mattfife.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9595"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mattfife.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9595"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}