Open-source stealth USB hides an encrypted partition behind an 8GB decoy drive — ‘Phantom Drive’ appears as a regular USB stick until you create a text file to

by

Open-source stealth USB hides an encrypted partition behind an 8GB decoy drive — 'Phantom Drive' appears as a regular USB stick until you create a text file to

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .

Watch On The Phantomdrive is built using the CH569 microcontroller that has a bunch of different hardware blocks — this project uses the USB3, SD/eMMC, and the AES block. There are no NAND chips directly onboard the custom PCB because of the ongoing component crisis. Instead, the Phantomdrive relies on a simple microSD card (that you provide; it doesn't come with one) for both its 8GB decoy partition and the hidden partition. The creator does say they'll make a version with eMMC modules once prices come down.

Of course, if someone were to open up the drive, they'd be able to physically rip the SD card out. However, it still wouldn't be a dead giveaway since many cheap USBs are powered by microSD cards, and SD card adapters are also a thing. Anyhow, the finished drive looks pretty simple from the inside; it comprises a USB port, two buck supplies, a button for firmware update, the microSD card, UART test points, and some support components. The custom firmware now comes into play.

(Image credit: Rootkit Labs) (Image credit: Rootkit Labs) Image 1 of 2 View Original

The name of the game is interception. The firmware doesn't know it's being used to handle file transfers; it just reads raw packets of data being sent over the USB bus as is. It's coded to always look for a "password" string, so as soon as you create the unlock.txt file with "password:xyz" inside, it detects the "xyz" bit and copies it over to SRAM, while overwriting the raw data with a bunch of zeroes before it's written to the SD card. The operating system thinks it's created the new file, but the firmware intercepted it midway and sent essentially nothing to the physical storage cells.

The firmware uses the unique internal hardware ID of the microcontroller as the salt, combines it with the password you just typed, and runs the pair through PBKDF2-HMAC-SHA-256 hashes 100,000 times (you can also select 600,000 times) to create a key. Each run induces an intentional 2-3 second delay to deter brute-force attacks that would try to crack the password. The key is used to unlock and lock the hidden partition, and since it's tied to the silicon itself, putting the SD card into another Phantom Drive will not unlock it.

Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick

Wi-Fi controlled hacking USB cable stealthily packs in a microcontroller, microSD storage, and more

TeamGroup shows off external SSD with wireless ‘self-destruct’ function

Key considerations

  • Investor positioning can change fast
  • Volatility remains possible near catalysts
  • Macro rates and liquidity can dominate flows

Reference reading

More on this site

Informational only. No financial advice. Do your own research.

Related posts:

  1. Open-source stealth USB hides an encrypted partition behind an 8GB decoy drive — ‘Phantom Drive’ appears as a regular USB stick until you create a text file to
  2. These 16 gadgets under $50 have upgraded my tech life, and most are already on sale for Black Friday
  3. These 16 gadgets under $50 have upgraded my tech life, and most are already on sale for Black Friday
  4. These 16 gadgets under $50 have upgraded my tech life, and most are already on sale for Black Friday

Leave a Comment