A team at the Research Institute for Computer Science and Random Systems in France has developed a new way to detect malware that doesn't require installing software on target devices. What is the way? A system based on a Raspberry Pi.
See also: Hackers infected with their own RAT malware
As Tom's Hardware reports, the researchers created a Raspberry Pi-based system capable of scanning a device for electromagnetic waves using an oscilloscope and an H-Field. Specific waves signal the presence of malware on the device, with the researchers managing to "gain precise knowledge about the type and identity of the malware."
See also: Malicious dnSpy app infects researchers and developers with malware
What makes this new technique so impressive is the fact that it doesn’t require any device modification or any interaction beyond the ability to scan for electromagnetic waves. No software installation also means that any obfuscation techniques used by malware writers simply don’t work. In fact, even obfuscation techniques can be detected and analyzed.
See also: Banking malware: The most dangerous trojans that have ever existed!
The end result is a system with a malware detection accuracy of 99.82%, which could prove invaluable to malware analysts. Of course, it will prove to be a nightmare for malware authors as they try to figure out how to hide their malicious code from an EM scanner without being able to detect its presence.
Information source: pcmag.com
