Ghost on the Wire

In this virtual presentation for DEF CON 31 DCGVR, security researcher Hoodie Pony presents "Ghost on the Wire," demonstrating how to construct out-of-band covert command-and-control (C2) channels over radio frequencies when traditional network egress is completely locked down. At 04:00, he configures an isolated virtual machine with all virtual network adapters severed, demonstrating that network-isolated environments remain vulnerable to RF-based signaling.

Hoodie Pony introduces Software-Defined Radios (SDRs) at 08:00, showing how attackers can transmit covert data payloads directly to target hosts. At 16:00, he leverages amateur radio infrastructure, broadcasting encoded AX.25 packets over the 2-meter band (144.390 MHz) using the Automatic Packet Reporting System (APRS). At 20:00, he details configuring the Dire Wolf software soundcard TNC to modulate and demodulate packet radio signals. He concludes at 24:00 by evaluating defensive countermeasures, emphasizing RF shielding and physical perimeter controls in high-security facilities. (AI summary — Gemini Flash)