---
title: Eight Years On, ODINI Still Walks Data Out of a Faraday Cage
description: Ben-Gurion's 2018 ODINI research beat Faraday shielding with CPU magnetic fields. ESET's GoldenJackal findings and 2025's SmartAttack show why it still matters.
canonical_url: https://codekeeper.co/ticker/odini-malware-bypasses-faraday-cages
---

# Eight Years On, ODINI Still Walks Data Out of a Faraday Cage

Ben-Gurion's 2018 ODINI research beat Faraday shielding with CPU magnetic fields. ESET's GoldenJackal findings and 2025's SmartAttack show why it still matters.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team May 11, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

In February 2018, Mordechai Guri's team at Ben-Gurion University published ODINI: proof-of-concept malware that lifts data off an air-gapped computer sitting inside a Faraday cage. Overload the CPU cores, and the low-frequency magnetic fields you generate pass straight through shielding designed to stop radio. Forty bits per second at 100 to 150 centimetres. Its companion, MAGNETO, dispensed with the dedicated receiver: an Android app read the phone's own magnetometer at 5 bits per second from 12.5 centimetres, and kept working with the handset in airplane mode or zipped inside a Faraday bag. Enough for passwords, tokens, keystrokes and keys. Not enough for files. Both papers rested on one assumption — that something had already infected the isolated machine. ESET closed that gap in October 2024, reporting what it called the first confirmed compromise of air-gapped systems: GoldenJackal toolsets at a European government body from May 2022 to March 2024. Infected USB drives carried the malware in, then carried emails, documents and keys out. The channel research didn't stop either. The same lab has since turned RAM into a radio transmitter with RAMBO and LCD panels into speakers with PIXHELL, and in June 2025 published SmartAttack — ultrasonic signals at 18 to 22 kHz, picked up by a compromised Wear OS smartwatch at up to 50 bits per second over more than six metres. Defences haven't moved much. Mu-metal shielding works and costs accordingly. Jamming works, with field generators or free in software by injecting random CPU load. Zoning is the one that survives contact with a budget — and it now has to cover watches and phones, not just laptops. **Source:** [Cybersecurity News](https://cybersecuritynews.com/odini-malware-air-gapped-computers/) · [ESET via BleepingComputer](https://www.bleepingcomputer.com/news/security/european-govt-air-gapped-systems-breached-using-custom-malware/) · [SecurityWeek](https://www.securityweek.com/new-smartattack-steals-air-gapped-data-using-smartwatches/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fodini-malware-bypasses-faraday-cages%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Windows Netlogon RCE Reported Under Active Exploitation — Patch Now Aug 12, 2026](https://codekeeper.co/ticker/critical-netlogon-vulnerability-patch-immediately)

[Software security Leader of 15 000-Mule Laundering Network Pleads Guilty Oct 13, 2026](https://codekeeper.co/ticker/oleg-korniev-guilty-money-laundering-ymco)

[Ransomware Gunra Ransomware Gang Exploits Fortinet Flaws and Bypasses MFA in Global Attacks Aug 14, 2026](https://codekeeper.co/ticker/gunra-ransomware-threatens-global-infrastructure)

[North Korea's Lazarus Group Exploits Windows Kernel Zero-Day to Deploy Upgraded Rootkit Aug 12, 2026](https://codekeeper.co/ticker/north-korea-lazarus-zero-day-exploit)
