A software (and sometimes hardware) module which perform keystroke logging (more often called keylogging or "keyloggers"), which is the action of tracking (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are ...

learn more… | top users | synonyms

1
vote
2answers
225 views

Online Shopping password keylogger risk

Suppose I do an online shopping they are asking me to enter my card details like four digit number(whatever related to that) and they are asking me to enter the PIN number too. If I enter all this ...
2
votes
2answers
156 views

Does a VM keylogger listen to the keyboard activities of the host?

I am running a Windows XP virtual machine on a Windows XP host machine. I use the VM for suspicious websites and software/applications. In the case a kaylogger will be installed on my VM: will this ...
1
vote
0answers
42 views

Shared clipboard on Linux without keylogging, etc. vulnerabilities?

X has some serious security problems, not the least of which is that any program using a given display can log keystrokes from any other program on that display. (This can be demonstrated easily using ...
2
votes
5answers
141 views

How safe/secure are banking applications on Android phones?

I have a mobile banking application installed on my phone which allows me to pay for things, transfer money using my phone from my account to another etc. How safe or unsafe is this application? For ...
0
votes
1answer
70 views

What security mechanisms are in place for iOS' custom keyboards?

Apple has just announced iOS 8. The new version appears to be more extensible than previous versions, and one of the new possiblities is to allow developers to develop custom keyboards, different than ...
24
votes
7answers
6k views

Is making a clean install enough to remove potential malware?

Is formatting the disk and reinstalling the system from scratch (to Ubuntu) enough to remove any potential hidden software spyware, keyloggers etc.? Or can something still persist installed in the ...
1
vote
2answers
78 views

How can one find keyloggers in javascript?

Assuming no XSS and a client-side only page, how can a keylogger be identified in javascript code? Should I simply look for the id of the targeted fields and possibly some sort of DOM traversal to ...
0
votes
2answers
80 views

How can a keylogger gather & transmit data from a client-only webapp run from file?

For a client-side only webapp run from file, how can a keylogger gather data and then transmit it? In this scenario, please limit the scope to the client code only, that an attacker somehow has ...
1
vote
2answers
52 views

Sign contents of entire computer?

If I travel abroad and am concerned that when I land in the foreign country they may try to install a digital keylogger, does this work as a potential solution: If I sign my entire computer's hard ...
3
votes
4answers
1k views

what is the best keylogger for security uses?

Today we were robbed. A thief come to our home at night and stole some stuff including my brother's laptop. I think that the right thing to do is to download a keylogger on my PC, just in case... I ...
2
votes
1answer
88 views

Skype is doing funny things when I type or click, does this necessarily mean malware may be in my computer?

I'm new to the IT Security Stack Exchange! This is my question: I've Skype installed on my Windows 7 computer. In the last few months I've noticed my mouse cursor blinks (I mean it shows that cursor ...
0
votes
2answers
110 views

Is it legal to create a remote administration tool? [closed]

I'm planning to make a simple remote administration tool with the basic features that are available on all other rats in the market. However, I'm really worrying about legal issues after marketing it. ...
2
votes
1answer
257 views

Keyloggers and Performance Benchmarks

I don't know very much about keyloggers; but I thought I'd be able to detect the presence of one by writing a program to simulate keystrokes (in Windows) and recording the throughput, then repeating ...
15
votes
7answers
1k views

Defence Against Keyboard Keylogger

I am wondering whether there is a way to defend against USB Keyboard Keylogger (obviously other than physically checking the keyboard every time after leaving my computer unattended). These days, ...
3
votes
3answers
2k views

How effective is Windows Task Manager at identifying keyloggers?

I just hit upon an idea I have used in the past to distinguish between two instances of the same program, one of which was hung. While Task Manager is open and visible and sorted by CPU usage, I pick ...
6
votes
2answers
6k views

Can Keyloggers get passwords from Windows 7/8 Logon Screen?

If yes, do you know some examples of Keyloggers capable of perform this? EDIT: I mean when logon in the windows right after power on the PC and/or when locked with Win+L.
2
votes
4answers
415 views

How would a keylogger bypass Wireshark sniffing?

I often see malicious keyloggers being advertised as having anit-wireshark feature. Meaning their data can't be sniffed. Is it possible to do so? How would they do it? My guess is that they just ...
15
votes
3answers
1k views

How easily are keyloggers foiled?

I was wondering exactly how powerful can keyloggers be? For example someone wanted to access his bank account (which of course is through HTTPS), he will "enter" his password using a combination of ...
-4
votes
6answers
6k views

Will antivirus detect all keyloggers?

Our company schedules Security Training courses for our personnel. In order for us to test them, we develop code such as keyloggers which we email to our personnel to detect stupid personnel, and of ...
1
vote
4answers
872 views

Task Manager and Keyloggers

I know that some of the best keyloggers can't be viewed from the Task Manager. Where can one see if such keyloggers are running on the system? Will they be in the Windows Services or are they hidden ...
14
votes
6answers
5k views

How is something as simple as a keylogger detected on a computer?

I found one online, which I wanted to try out at my house and see if it actually worked. It's written in C, and it is not very big at all considering half of it is just a bunch of cases for which key ...
0
votes
1answer
72 views

Anti-sniffer for USB [closed]

I'm looking for a Windows utility that can list all drivers, driver-filters, services, sniffers and other information for a selected USB port. I want to check if my "USB connection" is confidential. ...
9
votes
8answers
6k views

Keyloggers on Smartphones?

I need to clarify my question. I'm wondering if there are any apps for smartphone that can log each 'keystroke' (i.e. key pressed on touchscreen) that a user does. Performing a google search brings up ...
0
votes
5answers
232 views

Detecting unknown keyloggers

On a Linux system, is it at all possible to detect unknown keyloggers? Keyloggers which are new and haven't made it to any detection software's database?
2
votes
8answers
591 views

Finding Hidden Keylogger Through Forcing a Computation Error

It must be possible to detect keylogging by close scrutiny of timing between physical keystroke execution and the character's eventual occurrence on the screen. I've had a friend show me this with ...
6
votes
3answers
29k views

How to detect KeyLogger on Mac OS X ?

I have a Mac OS X computer and I want to know if it has installed a Keylogger or something that control what I'm doing: when I switch on/off the computer, what I install on it, etc. How can I know ...
-1
votes
3answers
230 views

Are virtual keyboards themselves secure? [closed]

It is advised to use on-screen keyboards on, for example, banking operations (especially if the site doesn't have a virtual keyboard) to beat keyloggers (at least minimize the risk). There is some ...
0
votes
2answers
99 views

Corporate IT monitoring and access to user private data (keylogging? https data transmission?) [closed]

I work at a large company that requires employees to sign a digital certification saying that we recognize the right of the said company to monitor all data and communication on our work laptops, and ...
1
vote
3answers
251 views

How do I know if I have a keylogger from my Flash client on Windows 7?

I'm at work and having some issues here, so I found a lot of suspicious files involving the Flash, so I though that could be a keylogger. How do I find out if it is, and if truly is, what do I do to ...
3
votes
4answers
340 views

If a remote user types in a password in a LogMeIn session, can the controlled computer extract the characters?

Assume I have root/administrator access to a given computer which is currently being controlled via LogMeIn from an outside location. I see a password being typed into a browser (as little black ...
0
votes
2answers
144 views

Protection against Keyloggers? [duplicate]

I was wondering, If I got infected with a Keylogger and I start my On-Screen Keyboard(from OS) and type things, will the symbols will be recorded (considering no Screenshots Keyloggers)? Since ...
5
votes
1answer
1k views

How secure is “Secure Keyboard Entry” in Mac OS X's Terminal?

I've been using Terminal under Mac OS X for years but somehow missed to spot this feature: I'm now wondering how does this actually work, and is it 100% safe? If it isn't, what technique could be ...
15
votes
1answer
436 views

Keyboard firmware hack - Linux vulnerable?

I see that Apple patched OS X to mitigate against K. Chen's famous Apple keyboard firmware hack. However: Apple keyboards can be used with computers running other operating systems; and in any ...
55
votes
21answers
10k views

How can I avoid my password being harvested by key loggers from internet cafes?

During traveling, especially in poor countries, sometimes you are going to need to use the internet at an internet cafe and you really can't be sure whether anyone has installed anything to listen to ...
4
votes
3answers
440 views

How to keep Mac secure from viruses, malware and keyloggers?

How can I download and install software and make sure that it is not infected with viruses, malware or a keylogger? Also, I heard that Macs "don't get viruses". Is this true? Is it a good practice to ...
0
votes
2answers
352 views

How to defeat software keyloggers [duplicate]

Is it possible to defeat software keyloggers? I remember reading long ago about programs run from a USB which will defeat keyloggers. The software works (if I remember correctly) by intercepting ...
-3
votes
1answer
2k views

Google Chrome is keylogger? [closed]

Hi i am a little bit worried that Google Chrome is logging my keystroke. One time ago i had situation with chrome that when i clicked some where in input box he was writting key by key(even backspace) ...
31
votes
6answers
64k views

Can I determine if my computer has a key logger installed?

A friend of mine just started a job at a security sensitive company. They've provided him with a laptop with Windows XP Professional installed. He's heard a rumor from other employees that the laptops ...
3
votes
2answers
123 views

How do I report a vulnerability to a large organization that doesn't believe it has a problem?

This issue is more political than technical. The organization has a lot of computers that connect via web browser to a central database. Customers are regularly left unattended with physical access ...
4
votes
5answers
702 views

What are the advantages of multi-level authentication?

By multi-level authentication, I am referring to the fact that the user makes use of a primary username password keypair to log into his account. Then, to perform some other actions, such as authorize ...
2
votes
1answer
167 views

What anti-keylogging programs can you use when using a public PCs

Are there anti-keylogging programs that can keep you safe while you are using a public PC terminal? Do they exist and what are these? I like to know that I am safe when entering data on a public PC ...
-6
votes
1answer
171 views

Spam mail from my yahoo mail [closed]

Couple of days back spam mail(screenshot link) was sent to all my contacts from my yahoo account, and in my account activity page there is a yahoo partner logged in, from Peru (screenshot link) during ...
1
vote
2answers
397 views

Does keylogger see CTR+C and CTRL+V? [duplicate]

E.g. if I copy something from the email from my hosting company (name, password etc.) and paste it to the ftp client or some online form in the browser, do the keylogger get this name or password? ...
1
vote
2answers
655 views

Reseting my computer to uninstall LogKext

My friend downloaded LogKext on my computer, so I'm guessing he can see every keystroke, but I've reset my computer so that it's in a condition when I first opened from the box. Can my friend still ...
1
vote
1answer
210 views

Android soft keyboard architecture

I am new to Android. I am trying to figure out how exactly a soft keyboard on an Android device works. What exactly is the 'behind the scenes' process that takes place so that the application is ...
-1
votes
2answers
436 views

Keyloggers and Email Accounts [duplicate]

This morning, I was experimenting with some keyloggers and noticed that they have a feature to send e-mails to the attacker. How can these e-mails be intercepted? Let us say that I have a packet ...
22
votes
3answers
2k views

Does overlaying the mouse on a virtual numeric keyboard really protect against keyloggers?

I just saw for the first time a new way to enter a password, at the Banque Postale (French Bank). You are given a virtual numeric keyboard and to type you can just leave the mouse cursor over a number ...
2
votes
2answers
843 views

Protection against screenshot key loggers [duplicate]

I was thinking of creating an on-screen keyboard to protect against keyloggers. The main problem is that I have found that there is a category of keloggers, called screenshot key loggers, which are ...
6
votes
2answers
374 views

Statistics on purposes of viruses/malware

Are there any resources that analyze the purpose or goal or the major viruses/malware out in the wild today? For example, what percentage are used to construct botnets (for DDoS or something else)? ...
0
votes
1answer
396 views

How do i protect my self from “Form grabbing” attack?

I'm writing a simple piece of security software - I'm interested in attack techniques and especially in how to protect my users from this attack? From wiki I can see how its works: it hooks the API ...