TrojPix Attack Uses Imperceptible Pixels to Steal Data From Air-Gapped Networks

TrojPix is a USENIX Security–documented proof-of-concept that converts HDMI/TMDS video cables into EM transmitters by subtly altering least-significant bits of pixels, enabling user‑mode malware on air‑gapped systems to exfiltrate data at up to 8.1 Mbps over distances up to 208 meters with near‑perfect accuracy; the report details delivery modes (fake screen‑off and foreground embedding), receiver decoding methods, experimental results across monitors and cables, and layered mitigations such as EM shielding, RF jamming, and migration to fiber.