Investigating Air Gaps: Espionage Tools Breaching Malware Barriers

Air Gaps Compromised by Advanced Malware

The breach of air-gapped devices is becoming increasingly serious as researchers have identified two never-before-seen espionage malware toolsets attributed to the hacking group known as GoldenJackal. Used to target sensitive data, these tools enable unauthorized access to devices that should be insulated from the Internet.

Historical Context of Air Gapping

Traditional air gapping, a method designed to secure critical networks against cyber threats, is showing vulnerabilities. Despite being a common security measure for high-stakes environments like voting systems and power generation, the emergence of dedicated malware proves that even the most stringent isolation can be breached.

Identical Toolsets Uncovered

• The first toolset was deployed starting in 2019 against a South Asian embassy in Belarus.
• Another toolset surfaced in 2022 targeting a European Union government entity.
• Both sets of tools share components identified by Kaspersky in previous research.

ESET's findings not only emphasize the advanced strategies employed by GoldenJackal but also underline the fundamental need for improved security measures in protecting air-gapped networks.