New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions

Researchers at Shandong University demonstrated TrojPix, an "imperceptible pixel modulation" technique that converts video cables into covert radio transmitters by subtly altering on-screen pixels. The approach requires only user-level malware capable of drawing to the display, can hide transmissions by faking a powered-off screen or embedding signals in normal content, and in lab tests reached up to 8.1 Mbps and reported ranges up to 208 meters (measured separately). The attack is a high-throughput exfiltration TTP for air-gapped systems rather than an infection vector; recommended mitigations are physical and preventive (use fiber, shield cables/rooms, and prevent malware on endpoints).