• @steventhedev
    link
    22 days ago

    Best I can get is figuring out a way to reuse some pins on the uc to isolate two or three caps to use as voltage pumps and then dump the whole thing at once into the battery.

    I somehow suspect Electroboom is going to get a lot of new viewers in the next few days

    • comador
      link
      3
      edit-2
      2 days ago

      Reading a bit more into it, seems all of them were Motorola Apollo Gold pagers (I stand corrected), so they had to have exploited the li-on charging pins to either create a loop causing thermal runaway, or spam different voltage discharging signals via their payload. Regardless, it’s a truly impressive exploit.

      • @steventhedev
        link
        32 days ago

        You must have read that wrong - this was clearly committed by Israeli super spy Moty Rola.

        Seriously though - they were all from a single Iranian supplier, not Motorola (at least according to every source I can find)

        • comador
          link
          3
          edit-2
          2 days ago

          Yeah, news still coming in, hard to make sense of it all. I am now seeing models in the attack as being: Apollo Gold AP-700, AP-900 and AR-924.

          Ap-900 Battery electrical specs: 10-30VDC or 8-18VAC Input 3-40VDC/25VAC Standby <10mA Active <100mA Tolerance -10’C ~ +50’C

          Ah. So the G_Apollo AL-A25 logic chip used in these models is programmable and unlocked by default lol.

          Programmable chip responsible:

          GAPOLLO AL-A25_6 RA5794.1 chip = AP-900 and AR-924 models