Posted by on Nov 16, 2020
Air gapping is a network security measure commonly used in military/governmental, financial and industrial control systems networks that is applied to one or more computers in order to ensure that a given network is physically isolated – usually in order to prevent exposure of the subject network to the Internet or the local area network.
In March 2020 researchers discovered a cyber-espionage toolkit known as Ramsay, specifically designed to steal documents and operate within air-gapped networks.
In a presentation at VB2020 localhost, ESET researcher Ignacio Sanmillan spoke about Ramsay's main capabilities, the overlaps found with DarkHotel's Retro and some OPSEC failures the researchers spotted during their research.
If you missed VB2020 localhost don't worry, the content is still available to view at https://vblocalhost.com/.
