Lebanon pager attack: Can your technology be hacked remotely to cause physical harm?


  • English
  • Arabic

Live updates: Follow the latest on Israel-Gaza

Lebanon is reeling from deadly attacks that saw handheld communication devices detonate on Wednesday and thousands of pagers simultaneously explode to kill 12 people, including two children, and injure nearly 3,000 the day before.

Afterwards, concern grows over whether consumer electronics can be used to inflict physical harm on unsuspecting people. The short answer is, yes, it can be done – but the methods to actually do this are complex.

Without physical contact with the device, it is difficult to access the firmware – the software that manages the hardware – needed to manipulate physical parts such as a battery to make it overheat and possibly ignite.

Pagers, devices that can receive alphanumeric messages, were popular in the 1990s. While official verification of whether Israeli officials accessed Hezbollah pagers physically or accessed them en masse remotely is yet to be confirmed, Tuesday's attack shows that perpetrators are skilled enough to tap into older technology. This also raises questions about how much more damage can be done, particularly with higher-powered modern equipment.

Today, devices ranging from laptops to thermostats can be hacked remotely. Printers, for example, can have their ink heated enough to burn the paper inside them, or vehicle systems could be compromised to disable parts such as brakes. US consultancy Gartner in 2021 warned that cyber criminals would use operational technology environments to harm or kill humans in the next four years.

“In all these devices, there's a tiny, little computer there … [pagers] are kind of slow, but they're still computers,” Robert Graham, chief executive of Atlanta-based cyber security company Errata Security, told The National. “So whoever intercepted these would likely write their own software, change the software and put that on the devices, so that they would operate the same."

It is very difficult to remotely reprogramme the physical hardware of a battery to overheat to cause an explosion, Mr Graham said, and a phone battery would need to be fully charged to cause damage if triggered.

Picking targets

Smartphones, the most popular consumer electronic devices, are obvious candidates for an attack, but they are a costly option for potential attackers due to stringent measures taken by their makers.

Advanced technology has also contributed to preventing remote access, particularly within the top tier of smartphones from Apple and Google. Apps on devices from Samsung Electronics and Huawei Technologies “are known to often have a lot more bugs” than those from Apple and Google, Mr Graham said.

Mohamed Belarbi, chief executive of Abu Dhabi-based cyber security firm Cypherleak, agrees: the cost of hacking a well-made and secured device could be astronomical.

“When it comes to firmware, you need a lot of technical background and skills,” he told The National. You would have to be “able to bypass the security safeguards that are built in by the manufacturers.

"We've seen this before where the cost of hacking into an Apple iPhone could cost millions of dollars – now imagine multiplying that to access something as critical and as dangerous as blowing up a pager or blowing up a turbine.”

Yet for less protected or more flawed systems, everyday items can be used to hack into your devices. There is the humble data and power cable that can be bought on any e-commerce site such as Amazon, the most popular of which today is the USB-C. This simple connection has the ability to severely compromise a device.

“These things are becoming so sophisticated that today you can buy on the internet a USB-C cable that has a little computer embedded in the head of the cable,” Mr Belarbi said. This device can manipulate the physical components of technology to a desired, and in many cases malicious, effect.

Taking precautions

In the US, the FBI last year warned against using public charging points for electronic devices, saying they can be a gateway for cyber criminals. Charging stations in public spaces, including malls, hotels, restaurants and parks, have paved the way for “juice jacking”, which simply means using a USB connection to compromise a device.

“The moment you start using it to charge, the hacker is able to access your phone and to gather data. And this is quite common,” Mr Belarbi added.

Where technology is manufactured and who is involved in the supply chain can be risk factors, particularly in today's more globalised environment. For example, a lot of devices and their parts are sourced from China, which means there is a chance that the state or its actors might intervene, similar to the US government's backdoor access to online platforms, he said.

“I think it's just an inherent risk that we have to live with and [have to] determine what are we comfortable with and what are we not comfortable with.”

Another question that has been asked is why attacks using technology have not been seen in Gaza. One answer is that because a lot of the technology in Gaza is locally made, it is less accessible.

“They're able to communicate without interference from outside operators or actors,” Mr Belarbi said, unlike in the case of Israel's attack on Hezbollah, where radio waves could have been used to cause temporary interference.

“So you always see … the benefit, pros and cons of having your own technology. Yes, in terms of maturity and advancement, it might not catch up with whatever is out there commercially, but it definitely allows you to avoid a lot of the issues associated with technology tampering,” he added.

Manufacturers must adapt

“There's nothing you can do if a phone or device has been tampered with at the manufacturer or supply chain level before it reaches you,” Mr Belarbi said. “Because even if you open an iPhone or a Samsung, you wouldn't be able to tell.”

Manufacturers, especially the biggest ones, ensure a strict ecosystem in the components of their devices – but not all firms are built equally.

“We have companies that are ahead of the curve – Apple and Google ,” Mr Graham said. “Most electronic devices are behind the curve, and we can probably find the bug pretty easily, whereas Apple and Android are very, very tough.”

But the Lebanon incident also goes beyond being a wake-up call – it's a “stark reminder that our approach to supply-chain security needs a complete overhaul”, Andreas Hassellof, chief executive of Dubai-based technology company Ombori, told The National.

“We're facing a new breed of threats that blur the lines between digital and physical vulnerabilities,” he said, noting the previous advanced supply chain attacks on SolarWinds, NotPetya and SuperMicro. “The message is clear: adapt or become a target. Organisations clinging to outdated security models aren't just falling behind – they're inviting disaster.”

%3Cp%3EThe%20Department%20of%20Culture%20and%20Tourism%20-%20Abu%20Dhabi%E2%80%99s%20Arabic%20Language%20Centre%20will%20mark%20International%20Women%E2%80%99s%20Day%20at%20the%20Bologna%20Children's%20Book%20Fair%20with%20the%20Abu%20Dhabi%20Translation%20Conference.%20Prolific%20Emirati%20author%20Noora%20Al%20Shammari%2C%20who%20has%20written%20eight%20books%20that%20%20feature%20in%20the%20Ministry%20of%20Education's%20curriculum%2C%20will%20appear%20in%20a%20session%20on%20Wednesday%20to%20discuss%20the%20challenges%20women%20face%20in%20getting%20their%20works%20translated.%3C%2Fp%3E%0A
The specs
 
Engine: 3.0-litre six-cylinder turbo
Power: 398hp from 5,250rpm
Torque: 580Nm at 1,900-4,800rpm
Transmission: Eight-speed auto
Fuel economy, combined: 6.5L/100km
On sale: December
Price: From Dh330,000 (estimate)
UAE%20SQUAD
%3Cp%3E%0DJemma%20Eley%2C%20Maria%20Michailidou%2C%20Molly%20Fuller%2C%20Chloe%20Andrews%20(of%20Dubai%20College)%2C%20Eliza%20Petricola%2C%20Holly%20Guerin%2C%20Yasmin%20Craig%2C%20Caitlin%20Gowdy%20(Dubai%20English%20Speaking%20College)%2C%20Claire%20Janssen%2C%20Cristiana%20Morall%20(Jumeirah%20English%20Speaking%20School)%2C%20Tessa%20Mies%20(Jebel%20Ali%20School)%2C%20Mila%20Morgan%20(Cranleigh%20Abu%20Dhabi).%3C%2Fp%3E%0A
The years Ramadan fell in May

1987

1954

1921

1888

Opening weekend Premier League fixtures

Weekend of August 10-13

Arsenal v Manchester City

Bournemouth v Cardiff City

Fulham v Crystal Palace

Huddersfield Town v Chelsea

Liverpool v West Ham United

Manchester United v Leicester City

Newcastle United v Tottenham Hotspur

Southampton v Burnley

Watford v Brighton & Hove Albion

Wolverhampton Wanderers v Everton

The five pillars of Islam

1. Fasting 

2. Prayer 

3. Hajj 

4. Shahada 

5. Zakat 

Specs

Engine: 51.5kW electric motor

Range: 400km

Power: 134bhp

Torque: 175Nm

Price: From Dh98,800

Available: Now

Israel Palestine on Swedish TV 1958-1989

Director: Goran Hugo Olsson

Rating: 5/5

The years Ramadan fell in May

1987

1954

1921

1888

Long read

Mageed Yahia, director of WFP in UAE: Coronavirus knows no borders, and neither should the response

The specs

Engine: Dual 180kW and 300kW front and rear motors

Power: 480kW

Torque: 850Nm

Transmission: Single-speed automatic

Price: From Dh359,900 ($98,000)

On sale: Now

The burning issue

The internal combustion engine is facing a watershed moment – major manufacturer Volvo is to stop producing petroleum-powered vehicles by 2021 and countries in Europe, including the UK, have vowed to ban their sale before 2040. The National takes a look at the story of one of the most successful technologies of the last 100 years and how it has impacted life in the UAE. 

Read part four: an affection for classic cars lives on

Read part three: the age of the electric vehicle begins

Read part one: how cars came to the UAE

 

The specs

Engine: Turbocharged four-cylinder 2.7-litre

Power: 325hp

Torque: 500Nm

Transmission: 10-speed automatic

Price: From Dh189,700

On sale: now

The%20specs
%3Cp%3E%3Cstrong%3EEngine%3A%20%3C%2Fstrong%3E77kWh%202%20motors%0D%3Cbr%3E%3Cstrong%3EPower%3A%20%3C%2Fstrong%3E178bhp%0D%3Cbr%3E%3Cstrong%3ETorque%3A%20%3C%2Fstrong%3E410Nm%0D%3Cbr%3E%3Cstrong%3ERange%3A%20%3C%2Fstrong%3E402km%0D%3Cbr%3E%3Cstrong%3EPrice%3A%20%3C%2Fstrong%3EDh%2C150%2C000%20(estimate)%0D%3Cbr%3E%3Cstrong%3EOn%20sale%3A%20%3C%2Fstrong%3ETBC%3C%2Fp%3E%0A
Shipping%20and%20banking%20
%3Cp%3EThe%20sixth%20sanctions%20package%20will%20also%20see%20European%20insurers%20banned%20from%20covering%20Russian%20shipping%2C%20more%20individuals%20added%20to%20the%20EU's%20sanctions%20list%20and%20Russia's%20Sberbank%20cut%20off%20from%20international%20payments%20system%20Swift.%3C%2Fp%3E%0A

North Pole stats

Distance covered: 160km

Temperature: -40°C

Weight of equipment: 45kg

Altitude (metres above sea level): 0

Terrain: Ice rock

South Pole stats

Distance covered: 130km

Temperature: -50°C

Weight of equipment: 50kg

Altitude (metres above sea level): 3,300

Terrain: Flat ice
 

Jetour T1 specs

Engine: 2-litre turbocharged

Power: 254hp

Torque: 390Nm

Price: From Dh126,000

Available: Now

Dubai World Cup nominations

UAE: Thunder Snow/Saeed bin Suroor (trainer), North America/Satish Seemar, Drafted/Doug Watson, New Trails/Ahmad bin Harmash, Capezzano, Gronkowski, Axelrod, all trained by Salem bin Ghadayer

USA: Seeking The Soul/Dallas Stewart, Imperial Hunt/Luis Carvajal Jr, Audible/Todd Pletcher, Roy H/Peter Miller, Yoshida/William Mott, Promises Fulfilled/Dale Romans, Gunnevera/Antonio Sano, XY Jet/Jorge Navarro, Pavel/Doug O’Neill, Switzerland/Steve Asmussen.

Japan: Matera Sky/Hideyuki Mori, KT Brace/Haruki Sugiyama. Bahrain: Nine Below Zero/Fawzi Nass. Ireland: Tato Key/David Marnane. Hong Kong: Fight Hero/Me Tsui. South Korea: Dolkong/Simon Foster.

Fixtures
%3Cp%3E%3Cstrong%3EWednesday%2C%20April%203%3C%2Fstrong%3E%3C%2Fp%3E%0A%3Cp%3EArsenal%20v%20Luton%20Town%2C%2010.30pm%20(UAE)%3C%2Fp%3E%0A%3Cp%3EManchester%20City%20v%20Aston%20Villa%2C%2011.15pm%20(UAE)%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EThursday%2C%20April%204%3C%2Fstrong%3E%3C%2Fp%3E%0A%3Cp%3ELiverpool%20v%20Sheffield%20United%2C%2010.30pm%20(UAE)%3C%2Fp%3E%0A
Results:

2.15pm: Handicap (PA) Dh60,000 1,200m.

Winner: AZ Dhabyan, Adam McLean (jockey), Saleha Al Ghurair (trainer).

2.45pm: Maiden (PA) Dh60,000 1,200m.

Winner: Ashton Tourettes, Sam Hitchcott, Ibrahim Aseel.

3.15pm: Conditions (PA) Dh60,000 2,000m.

Winner: Hareer Al Reef, Gerald Avranche, Abdallah Al Hammadi.

3.45pm: Maiden (PA) Dh60,000 1,700m.

Winner: Kenz Al Reef, Gerald Avranche, Abdallah Al Hammadi.

4.15pm: Sheikh Ahmed bin Rashid Al Maktoum Cup (TB) Dh 200,000 1,700m.

Winner: Mystique Moon, Sam Hitchcott, Doug Watson.

4.45pm: The Crown Prince Of Sharjah Cup Prestige (PA) Dh200,000 1,200m.

Winner: ES Ajeeb, Sam Hitchcott, Ibrahim Aseel.

Tips for taking the metro

- set out well ahead of time

- make sure you have at least Dh15 on you Nol card, as there could be big queues for top-up machines

- enter the right cabin. The train may be too busy to move between carriages once you're on

- don't carry too much luggage and tuck it under a seat to make room for fellow passengers

The%20Genius%20of%20Their%20Age
%3Cp%3EAuthor%3A%20S%20Frederick%20Starr%3Cbr%3EPublisher%3A%20Oxford%20University%20Press%3Cbr%3EPages%3A%20290%3Cbr%3EAvailable%3A%20January%2024%3C%2Fp%3E%0A
What's in the deal?

Agreement aims to boost trade by £25.5bn a year in the long run, compared with a total of £42.6bn in 2024

India will slash levies on medical devices, machinery, cosmetics, soft drinks and lamb.

India will also cut automotive tariffs to 10% under a quota from over 100% currently.

Indian employees in the UK will receive three years exemption from social security payments

India expects 99% of exports to benefit from zero duty, raising opportunities for textiles, marine products, footwear and jewellery

Vikram%20Vedha
%3Cp%3E%3Cstrong%3EDirectors%3A%3C%2Fstrong%3E%20Gayatri%2C%20Pushkar%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EStars%3A%3C%2Fstrong%3E%20Hrithik%20Roshan%2C%20Saif%20Ali%20Khan%2C%20Radhika%20Apte%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ERating%3A%C2%A0%3C%2Fstrong%3E3.5%2F5%3C%2Fp%3E%0A
The burning issue

The internal combustion engine is facing a watershed moment – major manufacturer Volvo is to stop producing petroleum-powered vehicles by 2021 and countries in Europe, including the UK, have vowed to ban their sale before 2040. The National takes a look at the story of one of the most successful technologies of the last 100 years and how it has impacted life in the UAE.

Read part three: the age of the electric vehicle begins

Read part two: how climate change drove the race for an alternative 

Read part one: how cars came to the UAE

War and the virus

Qosty Byogaani

Starring: Hani Razmzi, Maya Nasir and Hassan Hosny

Four stars

Lexus LX700h specs

Engine: 3.4-litre twin-turbo V6 plus supplementary electric motor

Power: 464hp at 5,200rpm

Torque: 790Nm from 2,000-3,600rpm

Transmission: 10-speed auto

Fuel consumption: 11.7L/100km

On sale: Now

Price: From Dh590,000

While you're here
Key facilities
  • Olympic-size swimming pool with a split bulkhead for multi-use configurations, including water polo and 50m/25m training lanes
  • Premier League-standard football pitch
  • 400m Olympic running track
  • NBA-spec basketball court with auditorium
  • 600-seat auditorium
  • Spaces for historical and cultural exploration
  • An elevated football field that doubles as a helipad
  • Specialist robotics and science laboratories
  • AR and VR-enabled learning centres
  • Disruption Lab and Research Centre for developing entrepreneurial skills
Teaching your child to save

Pre-school (three - five years)

You can’t yet talk about investing or borrowing, but introduce a “classic” money bank and start putting gifts and allowances away. When the child wants a specific toy, have them save for it and help them track their progress.

Early childhood (six - eight years)

Replace the money bank with three jars labelled ‘saving’, ‘spending’ and ‘sharing’. Have the child divide their allowance into the three jars each week and explain their choices in splitting their pocket money. A guide could be 25 per cent saving, 50 per cent spending, 25 per cent for charity and gift-giving.

Middle childhood (nine - 11 years)

Open a bank savings account and help your child establish a budget and set a savings goal. Introduce the notion of ‘paying yourself first’ by putting away savings as soon as your allowance is paid.

Young teens (12 - 14 years)

Change your child’s allowance from weekly to monthly and help them pinpoint long-range goals such as a trip, so they can start longer-term saving and find new ways to increase their saving.

Teenage (15 - 18 years)

Discuss mutual expectations about university costs and identify what they can help fund and set goals. Don’t pay for everything, so they can experience the pride of contributing.

Young adulthood (19 - 22 years)

Discuss post-graduation plans and future life goals, quantify expenses such as first apartment, work wardrobe, holidays and help them continue to save towards these goals.

* JP Morgan Private Bank 

Landfill in numbers

• Landfill gas is composed of 50 per cent methane

• Methane is 28 times more harmful than Co2 in terms of global warming

• 11 million total tonnes of waste are being generated annually in Abu Dhabi

• 18,000 tonnes per year of hazardous and medical waste is produced in Abu Dhabi emirate per year

• 20,000 litres of cooking oil produced in Abu Dhabi’s cafeterias and restaurants every day is thrown away

• 50 per cent of Abu Dhabi’s waste is from construction and demolition

In numbers: China in Dubai

The number of Chinese people living in Dubai: An estimated 200,000

Number of Chinese people in International City: Almost 50,000

Daily visitors to Dragon Mart in 2018/19: 120,000

Daily visitors to Dragon Mart in 2010: 20,000

Percentage increase in visitors in eight years: 500 per cent

John%20Wick%3A%20Chapter%204
%3Cp%3E%3Cstrong%3EDirector%3A%3C%2Fstrong%3E%20Chad%20Stahelski%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EStars%3A%3C%2Fstrong%3E%20Keanu%20Reeves%2C%20Laurence%20Fishburne%2C%20George%20Georgiou%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ERating%3A%20%3C%2Fstrong%3E4%2F5%3C%2Fp%3E%0A
Greatest of All Time
Starring: Vijay, Sneha, Prashanth, Prabhu Deva, Mohan
Director: Venkat Prabhu
Rating: 2/5
Squid Game season two

Director: Hwang Dong-hyuk 

Stars:  Lee Jung-jae, Wi Ha-joon and Lee Byung-hun

Rating: 4.5/5

%3Cp%3E%3Cstrong%3EDirector%3A%3C%2Fstrong%3E%20Nag%20Ashwin%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EStarring%3A%20%3C%2Fstrong%3EPrabhas%2C%20Saswata%20Chatterjee%2C%20Deepika%20Padukone%2C%20Amitabh%20Bachchan%2C%20Shobhana%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ERating%3A%20%3C%2Fstrong%3E%E2%98%85%E2%98%85%E2%98%85%E2%98%85%3C%2Fp%3E%0A
How to register as a donor

1) Organ donors can register on the Hayat app, run by the Ministry of Health and Prevention

2) There are about 11,000 patients in the country in need of organ transplants

3) People must be over 21. Emiratis and residents can register. 

4) The campaign uses the hashtag  #donate_hope

TRAP

Starring: Josh Hartnett, Saleka Shyamalan, Ariel Donaghue

Director: M Night Shyamalan

Rating: 3/5

COMPANY PROFILE

Name: Qyubic
Started: October 2023
Founder: Namrata Raina
Based: Dubai
Sector: E-commerce
Current number of staff: 10
Investment stage: Pre-seed
Initial investment: Undisclosed 

GAC GS8 Specs

Engine: 2.0-litre 4cyl turbo

Power: 248hp at 5,200rpm

Torque: 400Nm at 1,750-4,000rpm

Transmission: 8-speed auto

Fuel consumption: 9.1L/100km

On sale: Now

Price: From Dh149,900

The five pillars of Islam

1. Fasting

2. Prayer

3. Hajj

4. Shahada

5. Zakat 

Disclaimer

Director: Alfonso Cuaron 

Stars: Cate Blanchett, Kevin Kline, Lesley Manville 

Rating: 4/5

Director: Laxman Utekar

Cast: Vicky Kaushal, Akshaye Khanna, Diana Penty, Vineet Kumar Singh, Rashmika Mandanna

Rating: 1/5

Results

2pm: Handicap (PA) Dh80,000 1,600m; Winner: AF Al Baher, Bernardo Pinheiro (jockey), Ernst Oertel (trainer).

2.30pm: Handicap (TB) Dh100,000 1,600m; Winner: Talento Puma, Xavier Ziani, Salem bin Ghadayer.

3pm: Handicap (TB) Dh90,000 1,950m; Winner: Tailor’s Row, Royston Ffrench, Salem bin Ghadayer.

3.30pm: Jebel Ali Stakes Listed (TB) Dh500,000 1,950m; Winner: Mark Of Approval, Patrick Cosgrave, Mahmood Hussain.

4pm: Conditions (TB) Dh125,000 1,400m; Winner: Dead-heat Raakez, Jim Crowley, Nicholas Bachalard/Attribution, Xavier Ziani, Salem bin Ghadayer.

4.30pm: Jebel Ali Sprint (TB) Dh500,000 1,000m; Winner: AlKaraama, Antonio Fresu, Musabah Al Muhairi.

5pm: Handicap (TB) Dh100,000 1,200m; Winner: Wafy, Richard Mullen, Satish Seemar.

5.30pm: Handicap (TB) Dh90,000 1,400m; Winner: Cachao, Tadhg O’Shea, Satish Seemar.

'The Ice Road'

Director: Jonathan Hensleigh
Stars: Liam Neeson, Amber Midthunder, Laurence Fishburne

2/5

Scoreline:

Everton 4

Richarlison 13'), Sigurdsson 28', ​​​​​​​Digne 56', Walcott 64'

Manchester United 0

Man of the match: Gylfi Sigurdsson (Everton)

Updated: September 19, 2024, 10:48 AM`