BadBIOS is alleged malware described by network security researcher Dragos Ruiu in October 2013[1][2] with the ability to communicate between instances of itself across air gaps using ultrasonic communication between a computer's speakers and microphone.[3][2] To date, there have been no proven occurrences of this malware.
Ruiu says that the malware is able to infect the BIOS of computers running Windows, Mac OS X, BSD and Linux as well as spread infection over USB flash drives.[2] Rob Graham of Errata Security produced a detailed analysis[4] of each element of the descriptions of BadBIOS's capabilities, describing the software as "plausible", whereas Paul Ducklin on the Sophos Naked Security blog[5] suggested "It's possible, of course, that this is an elaborate hoax".[1] After Ruiu posted data dumps which supposedly demonstrated the existence of the virus, "all signs of maliciousness were found to be normal and expected data".[6]
In December 2013 computer scientists Michael Hanspach and Michael Goetz released a paper to the Journal of Communication demonstrating the possibility of an acoustic mesh networking at a slow 20 bits per second using a set of speakers and microphones for sonic communication in a fashion similar to BadBIOS's described abilities.[7]
BadBIOS is alleged malware described by network security researcher Dragos Ruiu in October 2013[1][2] with the ability to communicate between instances of itself across air gaps using ultrasonic communication between a computer's speakers and microphone.[3][2] To date, there have been no proven occurrences of this malware.
Ruiu says that the malware is able to infect the BIOS of computers running Windows, Mac OS X, BSD and Linux as well as spread infection over USB flash drives.[2] Rob Graham of Errata Security produced a detailed analysis[4] of each element of the descriptions of BadBIOS's capabilities, describing the software as "plausible", whereas Paul Ducklin on the Sophos Naked Security blog[5] suggested "It's possible, of course, that this is an elaborate hoax".[1] After Ruiu posted data dumps which supposedly demonstrated the existence of the virus, "all signs of maliciousness were found to be normal and expected data".[6]
In December 2013 computer scientists Michael Hanspach and Michael Goetz released a paper to the Journal of Communication demonstrating the possibility of an acoustic mesh networking at a slow 20 bits per second using a set of speakers and microphones for sonic communication in a fashion similar to BadBIOS's described abilities.[7]