ESauron detects hidden spy cameras by exploiting electromagnetic radiation (EMR) that leaks from their internal memory during video processing. All spy cameras must first digest raw video data—through encoding or compression—using built‑in read‑write memory. The memory clock drives a variable number of switching voltage‑regulator operations; the resulting fluctuating currents emit EMR at the clock frequency.
When the visual scene changes—for example, a light turning on or off—the video‑encoding workload spikes, causing a sudden surge in EMR. ESauron deliberately induces such scene changes and then measures the resulting EMR burst. By distinguishing this signal from background noise, the system can assert the presence of a camera and estimate its location.
In experiments with fifty commercial spy‑camera products—including wireless, wired, and offline models—ESauron achieved perfect detection after only four stimuli. The detection range exceeded twenty meters even when obstacles blocked the line of sight, and the system could accurately locate each camera.
The method’s effectiveness hinges on inadequate electromagnetic shielding; if the memory circuitry were properly shielded, the EMR leaks would be suppressed and the attack would fail. The authors note that manufacturers could mitigate the vulnerability by better shielding, although many low‑cost cameras currently lack such protections.