New way to hack by hearing the Sound waves of the victim

In earlier hacking are done using the Brute Force attack and Phishing attack but now it extremely moves on to the next level. Here is the new way in which hacker can steal your password. But now this time hacker uses soundwaves generated by the victim device to steal the password. This can be done with the help of microphones. In this blog post, I have explained the way in which this attack can be done.

                             
This new attack is founded by the study conducted by the researchers from Cambridge University. They have reported this attack to the US news media Wall Street Journal.

What this attack??

The keynote of the attack is the soundwaves. Whenever we are typing throughout the Virtual keyboard in the Smartphone or any other device it creates a soundwave and a minute vibrations specific to each Keystroke. These soundwaves are very difficult to hear. But this can be done using the Malware which is injected to the victim device. The malware captures the Soundwaves and vibrations generated by the Victim Keyboard and sends it to the attacker. the attacker uses a machine learning algorithm to decrypt the soundwaves. The system used the waves to determine which location on the keyboard is used by the victim.

note: The soundwave of each letter in the keyboard generates Unique soundwaves.

How will this happen??

• Attacker targets the malware to the victim device.
• Then the Malware App start to work in the background of the device without the knowledge of the victim.
• When user types in keyboard the malware catches the soundwaves and minute vibrations from the device and sends the collected data to the attacker.
• The attacker then decrypts the soundwaves by using machine learning algorithms to retrieve the victim data from soundwaves.

By this way, the attack works

But this attack can be done only when the user gives permission to the microphone. No other way to implement such attacks.

Some tips to be safe

• Avoid installing unnecessary apps.
• Install only from a trusted source.
• Avoid installing from third-party websites.
• Permission for the apps must be given carefully.