logo

New RAMBO attack steals data using RAM in air-gapped computers

ID: 22df0f00-0a78-50af-a65c-2cad50cdc5ca

STIX ID: report--22df0f00-0a78-50af-a65c-2cad50cdc5ca

Feed Name: Bleeping Computer

Threat Score
60/100

Date Published: 2024-09-07

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

RAMBO (Radiation of Air-gapped Memory Bus for Offense) is a research demonstration of a covert electromagnetic exfiltration technique where malware manipulates RAM access patterns to generate modulated emissions that can be received by an SDR; the paper reports throughput up to ~1,000 bps (suitable for small secrets like keystrokes or keys), effective ranges up to several meters depending on speed, and recommends mitigations including physical zoning, EM/RAM jamming, and Faraday shielding.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.