Researchers at Shandong University have unveiled TrojPix, a novel attack that leaks data from air-gapped systems by modulating video cable electromagnetic emissions. The technique achieves a peak throughput of 8.1 Mbps and reaches distances up to 208 meters. It requires no administrator privileges and works across nine monitor brands and fifteen video cables, making it a broadly applicable threat to physically isolated networks.
What Happened: TrojPix Attack Exfiltrates Data From Air-Gapped Systems via Video Cables
Air-gapped networks are designed to stay physically disconnected from external networks. Consequently, defenders often treat them as safe from remote exfiltration. TrojPix challenges that assumption by turning ordinary video cables into covert transmitters.
The attack was disclosed on July 6, 2026, by researchers from Shandong University and Quan Cheng Laboratory. It was presented at USENIX Security ’26. The team demonstrated that user-level malware can manipulate on-screen pixels in ways invisible to the human eye. These imperceptible changes alter the electromagnetic signals traveling through digital video cables. A nearby receiver can then decode those signals and reconstruct the stolen data.
TrojPix is not an initial access technique. It is an exfiltration channel. An attacker must already have malware on the target machine. However, once inside, the attack moves data out at speeds previously unheard of for air-gap covert channels. Most prior techniques crawl at bits or kilobits per second. TrojPix operates at megabits per second.
Technical Details of the TrojPix Vulnerability
TrojPix exploits controllable electromagnetic emissions from digital video cables. The core technique is called imperceptible pixel modulation. Malware running at the user level tweaks pixel values on the display in patterns the human eye cannot detect. Those pixel changes alter the electrical signals carried by the video cable, which in turn radiate detectable electromagnetic waves.
The researchers built a lightweight communication scheme that maps pixels to signal samples. It also includes adaptive decoding, which allows the receiver to maintain signal lock over extended distances. The attack was tested across a wide hardware matrix. Results held across nine commercial monitor manufacturers and fifteen different digital video cables.
TrojPix operates in two distinct attack modes:
- Fake Screen-Off Mode: The display appears powered down or black. In reality, it is actively transmitting data through imperceptible pixel modulation. To a casual observer, the machine looks idle.
- Foreground Embedding Mode: The malware hides the signal within normal on-screen content. The user sees ordinary documents, spreadsheets, or applications. The pixel-level changes blend into the visible image while still generating the desired electromagnetic emissions.
Both modes require no special system privileges. Any malware that can draw to the screen can execute the attack. No hardware modifications are needed on the target.
Performance Metrics
| Peak Throughput: | 8.1 Mbps |
| Maximum Range: | 208 meters |
| Privileges Required: | User-level only |
| Hardware Changes: | None required |
| Monitor Compatibility: | 9 commercial brands tested |
| Cable Compatibility: | 15 digital video cables tested |
At 8.1 Mbps, TrojPix can move a 100 MB file in under two minutes. That transforms the threat model from leaking small text snippets to exfiltrating entire databases or document archives.
Business and Operational Impact
Air-gapped systems are common in high-security environments. Government agencies, defense contractors, critical infrastructure operators, and financial institutions all rely on physical isolation to protect sensitive data. TrojPix demonstrates that isolation alone is insufficient if an attacker gains a foothold.
The impact categories include:
- Data Exfiltration at Scale: Prior air-gap covert channels were too slow for large files. TrojPix changes the calculus. Entire file systems can now be moved out in minutes rather than hours or days.
- Stealth: Fake screen-off mode leaves no visible trace. Foreground embedding mode hides in plain sight. Both techniques evade casual detection.
- Broad Hardware Applicability: The attack works on commodity hardware. There is no reliance on obscure or outdated equipment.
- Low Barrier to Entry: User-level privileges are sufficient. An attacker does not need to escalate to root or administrator rights.
Moreover, TrojPix joins a growing family of screen-based exfiltration techniques. In 2024, researchers disclosed PIXHELL, which used screen-generated sound to leak data. TrojPix advances the field significantly by using electromagnetic emissions instead of acoustic channels, achieving far higher throughput.
Mitigation and Recommendations
Immediate Actions for Defenders
- Prevent Initial Compromise: TrojPix cannot function without malware on the target. Therefore, keeping air-gapped systems clean is the highest priority. Use strict removable media controls, hardware-enforced USB port locks, and robust physical security.
- Use Fiber-Optic Video Links: Fiber-optic cables do not emit the same electromagnetic signals as copper digital video cables. Replacing copper video cabling with fiber breaks the TrojPix channel entirely.
- Shield Cables and Rooms: TEMPEST-rated shielding for cables and enclosures can attenuate the electromagnetic emissions that TrojPix relies on. Consider shielding for the most sensitive facilities.
- Monitor for Anomalous Display Behavior: Although TrojPix is designed to be imperceptible, advanced monitoring might detect unusual GPU or display adapter activity. Behavioral monitoring tools should flag processes that repeatedly manipulate pixel values at high frequency.
- Restrict Unnecessary Display Output: In high-security air-gapped environments, consider disabling displays or using headless configurations where feasible. If no video signal is generated, TrojPix has no channel to exploit.
Long-Term Strategic Measures
Organizations should reassess their air-gap security models. Physical isolation remains valuable, but it must be supplemented with layered controls. Endpoint detection, strict media handling procedures, and regular compromise assessments are essential complements to network segmentation.
Bottom line: TrojPix proves that air-gapped systems are not immune to data exfiltration. Organizations relying on physical isolation alone must add fiber-optic video links, shielding, and rigorous endpoint controls to defend against this new class of electromagnetic covert channel.
Incident Summary
| Incident Name: | TrojPix Air-Gap Data Exfiltration Attack |
| Affected Systems: | Air-gapped computers with digital video cables; tested across 9 monitor brands and 15 cables |
| Disclosure Date: | July 6, 2026 |
| Research Institution: | Shandong University and Quan Cheng Laboratory |
| Conference: | USENIX Security ’26 |
| Peak Throughput: | 8.1 Mbps |
| Maximum Range: | 208 meters |
| Patch Status: | N/A — mitigation requires physical and procedural controls |
References
- Guoming Zhang et al., “TrojPix: Electromagnetic Covert Channels via Imperceptible Pixel Modulation,” USENIX Security ’26, July 2026. Available at: https://www.usenix.org/conference/usenixsecurity26/presentation/zhang-guoming (accessed July 6, 2026).
- The Hacker News, “New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions,” July 6, 2026. Available at: https://thehackernews.com/2026/07/new-trojpix-attack-leaks-data-from-air.html (accessed July 6, 2026).
- BleepingComputer, “TrojPix Air-Gap Attack,” security coverage, July 6, 2026.
- CISA, “Known Exploited Vulnerabilities Catalog,” general reference for air-gap security best practices. Available at: https://www.cisa.gov/known-exploited-vulnerabilities-catalog (accessed July 6, 2026).
