Fiber Optic Cables Can Be Used as Covert Microphones for Spying

Key Takeaways

• Researchers demonstrated a novel acoustic eavesdropping attack using ordinary fiber-to-the-home (FTTH) cables.
• The attack transforms standard fiber optic lines into undetectable microphones, immune to RF scanners and ultrasonic jammers.
• A custom “Sensory Receptor” device, disguised as a common optical fiber box, amplifies acoustic vibrations for effective speech capture.
• The threat requires physical access to fiber endpoints, posing a risk through rogue insiders or impersonated technicians.
• Mitigation strategies include installing polished fiber connectors, deploying optical isolators, minimizing fiber slack, and adding soundproofing.

Security researchers have unveiled a groundbreaking method to transform standard fiber-to-the-home (FTTH) telecom cables into clandestine listening devices. This sophisticated side-channel attack repurposes ordinary fiber optic lines into passive, undetectable microphones capable of capturing private conversations, challenging long-held assumptions about their security.

The findings, presented at the Network and Distributed System Security (NDSS) Symposium 2026 in San Diego, California, were detailed in a paper titled “Hiding an Ear in Plain Sight: On the Practicality and Implications of Acoustic Eavesdropping with Telecom Fiber Optic Cables.” The research team comprised experts from The Hong Kong Polytechnic University, The Chinese University of Hong Kong, and the Technological and Higher Education Institute of Hong Kong.

Fiber Optic Cables: The Covert Microphone

Fiber optic cables have traditionally been considered highly secure communication channels, inherently resistant to radio frequency (RF) emissions and electromagnetic interference. However, this new research exploits a fundamental physical property: optical fibers are sensitive to acoustic vibrations.

When sound waves encounter a fiber optic cable, they induce microscopic structural deformations. These minute changes in the cable’s physical structure, in turn, cause measurable phase shifts in the laser light traveling through the fiber. By connecting a commercially available Distributed Acoustic Sensing (DAS) system to just one end of the cable, an attacker can monitor these phase shifts and reconstruct the original sound wave from the other end, even over distances exceeding 50 meters.

The “Sensory Receptor” Device

Standard optical fiber alone lacks sufficient sensitivity to effectively capture airborne speech. To overcome this limitation, the researchers engineered a specialized “Sensory Receptor.” This device consists of a hollow PET (polyethylene terephthalate) cylinder, 65mm in diameter, with 15 meters of optical fiber tightly wound around its exterior. The cylinder’s design amplifies acoustic pressure fluctuations, converting them into longitudinal strain along the fiber, significantly boosting its sound capture capabilities.

Crucially, this receptor can be disguised as an ordinary optical fiber box, identical to enclosures routinely installed in homes and offices during FTTH deployments. This makes it virtually indistinguishable from legitimate networking equipment, allowing for covert placement.

The attack necessitates physical access to both the victim’s premises (Optical Network Unit or ONU) and the Optical Distribution Network (ODN). This physical access presents a realistic threat vector. FTTH deployments frequently involve ISP technicians, subcontractors, or third-party service providers gaining physical access to fiber endpoints during installation, upgrades, or troubleshooting. Such scenarios provide opportunities for a rogue insider or an attacker impersonating a legitimate technician to plant the sensory receptor undetected.

Striking Experimental Results

The research team conducted extensive experiments in both lab environments and real-world office settings, yielding compelling results:

• Speech Recovery: At a distance of 2 meters, the system achieved a Word Error Rate (WER) below 20%. This indicates that over 80% of spoken content was successfully transcribed using advanced AI speech recognition models, including OpenAI Whisper and NVIDIA Parakeet.
• Indoor Localization: The system could pinpoint a speaker’s position within a room with an average accuracy of 77 centimeters.
• Sound Event Detection: After fine-tuning deep learning models on the recovered audio, the system achieved 83% accuracy in identifying specific sound events such as typing, coughing, or alarms.
• Real-World Office Scenario: In a practical office setting involving two rooms separated by over 50 meters of fiber cable, optimal placement (fiber box under a desk) resulted in a remarkably low mean WER of just 9%, demonstrating near-perfect transcription capabilities.

Unlike traditional hidden microphones, fiber optic sensors operate without any electrical power and emit no RF signatures. This makes them entirely invisible to standard Technical Surveillance Countermeasures (TSCM) sweeps or RF bug detectors. Furthermore, when researchers tested commercial ultrasonic jammers—a common defense against covert microphones—the optical-fiber-based system exhibited no significant degradation in speech recognition performance, even with the jammer placed as close as 10 centimeters away. Conventional microphones, in contrast, were completely disrupted.

What You Should Do

• Install Polished Fiber Connectors: Implement polished fiber connectors to introduce Fresnel reflections, which can create “dead zones” in DAS detection systems, hindering an attacker’s ability to capture clear acoustic data.
• Deploy Optical Isolators: Integrate optical isolators on transmission channels. These devices prevent Rayleigh backscatter from returning to potential attackers, thereby disrupting the acoustic sensing mechanism.
• Minimize Excess Fiber Slack: Ensure that fiber cables inside rooms are installed with minimal slack and avoid allowing them to loop around or come into contact with resonant surfaces such as desks or walls, which can amplify vibrations.
• Add Sound-Proofing Materials: Where feasible, incorporate sound-proofing materials into walls and ceilings where fiber cables run. This can help dampen acoustic vibrations before they reach the fiber, reducing the quality of any potential eavesdropping.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.