Cyber Security News

WiFi Signals Can Track Human Activity Through Walls by Mapping Body Keypoints

In late February 2026, an open-source project named RuView (formerly WiFi DensePose) surged to the top of GitHub trending lists.

This edge AI system proves that everyday WiFi signals can track human movement, estimate body poses, and monitor vital signs through walls, all without using a single camera.

While marketed as a privacy-friendly tool for disaster response and elder care, cybersecurity experts warn it presents severe, undetectable physical surveillance threats.

The inexpensive ESP32-S3 microchip enables sophisticated, invisible human tracking when connected to RuView’s AI platform.​

Technical Capabilities and Execution

According to Ruvnet, RuView works by analyzing Channel State Information (CSI), which measures how WiFi radio waves scatter when they bounce off human bodies.

Built upon academic research from Carnegie Mellon University, this technology bypasses the limitations of basic signal strength indicators by capturing detailed amplitude and phase data across multiple subcarriers.

The system uses a mesh of 4 to 6 inexpensive ESP32-S3 sensor nodes, costing as little as $54 total, to establish a continuous radio frequency field model of any room.

As people move, sleep, or simply breathe inside the field, their physical bodies disturb the radio waves.

RuView’s artificial intelligence processes these tiny signal changes at a staggering 54,000 frames per second using a highly optimized Rust codebase.

By applying a deep neural network, the system translates the WiFi scattering into 17 distinct body keypoints, mapping the head, elbows, hips, and knees.

Remarkably, the system operates entirely on local edge devices, requiring no internet access, cloud processing, or labeled training data to continuously adapt to its environment.

Sensing FeatureDetection DetailsHardware Setup
Pose EstimationMaps 17 body keypoints using precise CSI maps ​ESP32-S3 Mesh (~$54) or Intel Research NIC ​
Breathing TrackingDetects 6 to 30 breaths per minute ​ESP32-S3 Mesh (~$54) or Intel Research NIC ​
Heart RateDetects 40 to 120 beats per minute ​ESP32-S3 Mesh (~$54) or Intel Research NIC ​
Through-Wall SensingScans up to 5 meters of concrete penetration ​ESP32-S3 Mesh (~$54) or Intel Research NIC ​
Basic PresenceDetects coarse motion and physical entry only ​Consumer Laptop (RSSI limits, Free) ​

Privacy Threats and Mitigation Tactics

The dual-use nature of RuView introduces a terrifying new vector for physical surveillance and reconnaissance.

Because WiFi signals easily pass through concrete and solid furniture, malicious actors can deploy hidden ESP32 chips immediately outside a building.

This allows attackers to secretly map security guard patrols, monitor daily employee routines, and detect exactly when sensitive server rooms are occupied.

Unlike traditional cameras, this method cannot be defeated by darkness, smoke, or physical barriers.

Since this tracking occurs at the physical layer, traditional network encryption protocols like WPA3 are completely powerless to stop it.

The hardware passively listens to existing radio waves, making it practically invisible to network administrators who normally hunt for rogue devices broadcasting malicious traffic.

Regulatory frameworks like GDPR struggle to address this tactic, as it passively senses physical bodies without actively collecting direct personal identifiers from user devices.

  • CSI Randomization (High Effectiveness): This approach disrupts the phase and amplitude patterns at the router level to prevent tracking, though it largely remains in the academic research phase.​
  • Physical RF Shielding (High Effectiveness): This defense involves applying traditional Faraday cages, metal meshes, or specialized RF-blocking paint to highly sensitive corporate rooms to block external signals entirely.​
  • RF Noise Injection (Medium Effectiveness): This method floods the target area with artificial RF signals to actively drown out and scramble the CSI scattering patterns that attackers rely on.​
  • Router Configuration (Low Effectiveness): Enterprise network hardware can disable exposing CSI, but this will not stop passive listeners from projecting their own rogue radio signals into the environment.​
  • Signal Limitation (Low Effectiveness): Minimizing the router’s transmit power and preferring 5GHz bands over 2.4GHz can help reduce how far the WiFi signal penetrates beyond exterior walls.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago