is it possible for my keyboard, a Logitech G910 Orion Spark to get infected with a virus or a keylogger after a friend used it to type in his log in password? his laptop's built in keyboard wasnt working so he used mine merely to type in his password then he unplugged it (he only wanted to watch some youtube vids and only needed his mouse for that). my question is, since this is a mechanical keyboard with on board memory and macro capabilities, is it possible that it got infected in that short time frame? what are the odds of that? shouldnt the potential exploit have to be specifically coded to infect this specific product? if its possible to infect, how does one check and by extension how does one remove the potential exploit? i havent seen any signs, im just paranoid about stuff like this and wish to make sure.
In fact, this is possible and Logitech peripherals have been used to attack machines, or to move malware from one host to another. Time doesn't really matter, because an infected PC can flash a hardware device in seconds (probably less).
Though I think it is highly unlikely you have been infected, for two reasons:
- This type of expolit has not been seen on mass scale (yet) and has primarily been a topic of studies.
- In addition to that, the malware must have been on the PC in the first place, and should have been capable of infecting you keyboard without any firmware corruption. This requires skills and a highly sophisticated piece of malware.
From what I gather, I don not think you have anything to worry about.
Like you said, a keyboard firmware will likely whipe the ROM.
It is highly unlikely, and yes it would have to be tailored to the device. I'd like to point you to Karsten Nohl's BadUSB attack, the code for which has been public for almost 2 years now. The bad news is; you can't really reliably detect it. The good news, because it's so obscure it's only doable for governments and large companies to build malware for it. So the chance is not quite zero, but not enough to worry about.