BSides London 2025

BSides London 2025

Ghost in the Radio: Covert Channels over RF
2025-12-13 , Track 2

Air-gapped? Think again. Radios aren’t just for walkie-talkies and hams — they’re an overlooked medium for sneaking data where it shouldn’t go. This talk explores how Reticulum can be used to establish covert channels for exfiltrating data, bypassing traditional network controls and flying under the radar either using RF or not! By blending modern mesh networking with old-school airwave hacking, we’ll show how data can “haunt” the spectrum, invisible to conventional defenses.


Data Exfiltration and covert C2 channels is huge topic in itself there are plenty of weird, wonderful and ultimately unpractical options, This talk will review a very silly way of data exfil and Covert channels.. or is it?

We’ll cover:
* How Reticulum enable mesh-style networking with and without internet infrastructure
* Techniques for tunnelling C2 communications and data exfiltration via Reticulum
* Tunnling via RF and/or Internet while staying hidden
* Detection challenges: why defenders rarely see this coming
* Live/demo examples of moving data over the air — outside traditional network monitoring

By the end, you’ll understand how radios can be weaponized as stealthy data mules, why this matters for red teamers and defenders alike, and how to start experimenting with your own RF-based ghost channels.

I have been Cyber Security for 10 years formally blue team turned Red. Before that he worked with a government body on radio communications, and is now an amateur radio operator. I have given talks on RF hacking, offensive security but generally just a weirdo who loves going down Cyber Security rabbit holes.