Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [keyloggers]

A software (and sometimes hardware) module which perform keystroke logging (more often called keylogging or "keyloggers"), which is the action of tracking (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are being monitored. There are numerous keylogging methods, ranging from hardware and software-based approaches to electromagnetic and acoustic analysis.

45
votes
6answers
10k views

Is the data between a keyboard and a web browser secure from local computer applications?

My question is about the text that I type on a keyboard while in a web browser. I understand that if the website has HTTPS the connection from my browser to the website is secure/encrypted, but what ...
0
votes
1answer
61 views

How can I tell if a keyboard for android is safe?

Background: I am a normal smart phone user, with no experience in information security. I want to download a new keyboard for my Android 6 phone off Google Play, as my current keyboard is not great. I ...
1
vote
1answer
53 views

Isn't Autohotkey effectively a keyspectator should I feel safe that I'm allowing this program to watch my keystrokes

Recently I started using Autohotkey just to automate some abbreviations so it's a hotstring e.g ::btw::by the way Replaces "btw" with "by the way" as soon as you press an default ending ...
0
votes
1answer
35 views

iCloud Security Concern: browser session authentication storage after 2-factor?

Does anyone know how Safari or Chrome stores a www.icloud.com session authentication after logging in and passing 2-factor authentication? Is it stored in an encrypted cookie? My concern is, if ...
0
votes
1answer
270 views

How can I detect possible spyware/keyloggers in my computer? [closed]

The reason is because of a recent data leak. I suspected that someone may have inserted keylogger to my computer. (a software, trojan). Some people think that the only way to really make sure there ...
1
vote
3answers
309 views

Could a hardware keylogger be installed in a laptop keyboard replacement?

I recently purchased a keyboard replacement for my laptop, manufactured out of country. Is it theoretically possible for a hardware keylogger to be installed? If so, would it be possible to transmit ...
0
votes
1answer
46 views

Are auto-type features of password managers actually effective against keyloggers?

Of course if you think of a "keylogger" as a program that can only read keystrokes, then copy-pasting on the clipboard is going to be enough. But we know that keyloggers are not really only "logging ...
0
votes
1answer
125 views

How to check if my PC's HTTPS/TLS connection is monitored or a key-logger is installed? [duplicate]

A few days ago, in the office, we were asked by our bosses to install a program. This was supposed to be an Antivirus program. But after installing this program many of our colleagues have been ...
0
votes
0answers
49 views

Are there compromised CAC readers for sale?

If a DoD employee needed to purchase a CAC reader for home use and they purchased one from Amazon. Is it possible the reader could contain malware, or in someway capture you pin or other private data?
0
votes
1answer
114 views

Apple iPhone Security

How difficult it would be to install an application that could record users keystrokes on an Apple device, for example, an iPhone X, and send it online without the knowledge of the user.
1
vote
0answers
325 views

What data is bitmoji keyboard collecting about me?

Bitmoji is a virtual keyboard for iOS and Android to create personalized emojis (very paraphrased). I've found a few blogs looking at the permissions it requests and the privacy policy that it shares ...
0
votes
2answers
403 views

Refurbished laptop computer - any advice?

I just recently bought a refurbished laptop. I have seen stories of refurbished phones being sold with spyware, trojans etc installed on them. My question is, what steps should I take (outside of ...
1
vote
2answers
347 views

How to analyze malware to find out where keylogger sent data?

Recently my antivirus detected some keyloggers that infected my network. I have those malware files and I want to analyze them. How can I do this analysis? It is important to find out details like ...
0
votes
1answer
217 views

How can I check if my second hand Apple wireless keyboard contains a keylogger?

I just got a cheap second-hand magic keyboard (Apple). Is there any way to check if it's been key logged? I cannot see any screws or openings other than the one for the battery pack.
2
votes
0answers
73 views

Need Security advice on virtualization and windows security

I have a little doubt about the security of my virtual machine and Windows. Can anyone please point me in right direction? Below is my what, how and why I made my virtual machine. Let me tell you ...
3
votes
1answer
252 views

Do pre-boot software keyloggers exist?

Let's sat for example that I have a laptop with just one hard drive running Windows 10. The Laptop's C:\ (boot) drive is encrypted using Bitlocker, and it set up to ask for a PIN on start to decrypt ...
7
votes
1answer
200 views

Healthcare company uses keyloggers for security purposes. Is this normal?

I just attended a recruitment session for a major healthcare provider in the United States. The presenter, a high-ranking member of one of their IT divisions (not security specifically) mentioned that ...
1
vote
1answer
1k views

does karabiner elements on Mac OSX contain or potentially contain malware?

I'm using Karabiner elements, an open-source program to remap the keys on my macbook air (running the latest Mac OSX High Sierra) and my apple wireless keyboard. It works very nicely. However, I am ...
3
votes
1answer
149 views

Is it risky to use an untrusted keyboard?

Suppose you're buying a new keyboard (say USB-wired, but consider Bluetooth connected as well) from Ebay. Is it risky to use that keyboard in a sense that it could be more than just a keyboard? ...
1
vote
1answer
2k views

Teamviewer logging remote keystroke events

I'm connecting to a remote machine via Teamviewer, let's assume it's trusted. Is it possible for a MITM or virus on my local (client) machine to detect keys I enter using my remote machine's on-...
0
votes
2answers
190 views

Would using a QWERTY keyboard with DVORAK output cause keylogger to log DVORAK?

I have QWERT keyboard, but I have set the keyboard settings in Windows to DVORAK. So if I type "test" it comes out as "y.oy". Would the key logger log "test" or "y.oy" in its records?
1
vote
1answer
134 views

Generating a secret on a compromised computer

Suppose we are on a compromised computer (for example infested with trojans logging key presses or taking screenshots) and for some reason we have to generate a number that's supposed to be secret for ...
2
votes
3answers
389 views

Keyboard vs clipboard password manager threat models

A password manager (like KeePass) offers you the option to copy and paste your password (the clipboard is cleared after pasting/timeout) or to emulate a keyboard and "type" the password for the user. ...
4
votes
1answer
90 views

iframe Checkout Procedure

I'm working for a company that wants to allow anyone to embed an iframe in which users can buy products on potentially any site. So it would be a typical use case for users to enter in their credit ...
2
votes
1answer
1k views

Can keyloggers intercept passwords when a password manager autofills a field? [duplicate]

I know that keyloggers primarily work by logging key presses, either through software or hardware. And some will also check for clipboard contents. But can a keylogger (or some other malware) ...
1
vote
1answer
77 views

Is it possible for an attacker to log my keystrokes on a linux server which has no X window system?

assuming the following: publicly reachable webserver - administered via SSH no X window system installed and no X11 forwarding through SSH attacker has gained access and is able to run a shell as my ...
1
vote
1answer
125 views

How does malware connect to FTP servers without revealing credentials to the victim?

Let’s take an FTP based passwords stealer, or some keylogger, that uploads the details of our victims to our FTP server. How do they connect back to our FTP server? As far as I know that for ...
1
vote
5answers
968 views

Is it possible to login on an machine with keylogger installed without compromising your password?

Suppose a scenario in which you have to login to a public/friends pc which has a keylogger installed. You need to login from that pc. Will it be possible to escape compromising your passwords if you ...
1
vote
2answers
359 views

Keystroke logging in virtual machine with soft keyboard

In conjunction with this question: Keystroke logging and virtual machines I'd like to ask if for example, while using the VM, could the keylogger (keylogger inside host) still log if I was using a ...
45
votes
3answers
10k views

Are virtual keyboards not necessary anymore to protect against keyloggers?

My bank has issued a new version of their online banking site. This new version has no virtual keyboard to enter the PIN. I asked them how are they protecting me against keyloggers but I didn't ...
1
vote
6answers
185 views

What is the best way to defend against an already comprised computer with a keylogger that is active?

I'm curious to what are the possible solutions to defending against a comprised computer with a key logger installed. Assume you had to login to a site with a user / password and there's no way to ...
3
votes
1answer
326 views

Is it possible to do exploit-free Linux keylogging with non-root client-only X Windows access?

Lets say that on a Linux system I use bubblewrap to sandbox an application and give it write access to /tmp/.X11-unix so that it can be an X Windows client. Is it possible for the sandboxed ...
1
vote
1answer
468 views

Keyboard entry obfuscation to defy keyloggers?

Do you know of any existing mechanisms for keyboard-entry-obfuscation to defy keyloggers? And if that exists does software such as (and in particular) VeraCrypt feature these? If such mechanisms don'...
2
votes
1answer
146 views

What steps should I take now that my online gaming account was compromised?

I recently received emails from my Origin account that my email address and security question had been changed (seems to have been someone in Russia since the new security question was in Russian). ...
0
votes
2answers
254 views

Password manager: master password or not?

I use several browsers for several reasons (surfing, downloading files, logging into accounts...) but I prefer Chrome for doing "risky" things like browsing websites which I don't know whether they ...
0
votes
1answer
392 views

Detect remote administration tool (rat)

I suspect being the victim of a hacking attack. What steps should I take to ensure that no rat software is running on my computer? I checked the autostart by executing initctl list but im not sure if ...
1
vote
0answers
81 views

APSHook.dll keylogger record keyboard inputs

My antivirus software detected APSHook.dll which is an application used by credible companies ( Cognizance Identity Manager or Bioscrypt VeriSoft Single Sign On or Credential Manager for HP ...
1
vote
1answer
169 views

How to detect ELSA installation on Windows?

ELSA is a CIA tool used to track down location of any Windows and of its current user through Wi-Fi environment tracking. This tracking is operating, whatever the Windows GUI says about the Wi-Fi ...
1
vote
0answers
62 views

Can Software keyloggers be able to track virtual keyboard entries [duplicate]

In some online banking sites, they provide a virtual onscreen keyboard(the keys will be shifted randomly when each time you open it. Not in the QWERTY order). If we use such keyboard, any keylogger ...
1
vote
1answer
763 views

Found KeyLogger in Windows 10 OS?

I was Running Yara, The pattern matching swiss knife for malware researchers on the Windows 10. I ran a scan using rules from Yara Rules from YARA Rules Github and MalwareConfig rules. I stumbled ...
0
votes
1answer
69 views

key strokes from different keyboards [closed]

when using multiple keyboards, it is possible to use them simultaneously. However one thing i noticed is that key combinations are also accepted across different keyboards. for example, i connect ...
4
votes
3answers
1k views

What's my exposure, and how to close it, from Conexant HD Audio Driver Package, CVE-2017-8360

I read about the key logging of the driver at modzero, and that it's apparently making all my keystrokes available. How much am I exposed by this, and can I reduce my exposure?
5
votes
2answers
3k views

How to detect a keylogger in a USB keyboard? Can a USB keyboard host a keylogger?

I recently got an USB keyboard. I want to investigate if the microcontroller of the keyboard may host a keylogger and how could it interact with a Windows OS. My understanding is that, once Windows ...
1
vote
0answers
38 views

How to remove a keylogger from MAC/how to reformat MAC to get rid of it? [duplicate]

I signed up to be a usability tester on a European site. I had to install software on my mac to complete a test. I had to use Disk Utility to install the dmg because just clicking it won't install. I ...
5
votes
1answer
204 views

Reality check: what actions should be taken if an hack attempt seems to be a false positive

Premise: Some time ago a friend of mine created a Microsoft based mail account (Live Id/Microsoft Account. He just needed the mail) to use for receiving some messages. The account was created and ...
1
vote
2answers
367 views

Is there any way to send malicious keystrokes to wireless keyboard USB dongle?

I have read many blogs on how to intercept wireless keyboard keystrokes. Similarly is there any way where we can send keystrokes to any keyboards USB receiver module? can we kick out the existing ...
2
votes
3answers
964 views

Storing password in sqlite vs asking user to type it in every time

I am making an Android app that needs to be very secure. For authentication to the server, it will use 2-factor authentication that includes: username/password sms verification I can't use client ...
0
votes
2answers
113 views

How unsecure is entering personal information via the keypad when phone banking?

A lot of banks I have dealt with require the customer to enter their customer number, internet banking password (or phone password) and date of birth all via the phone keypad, prior to being connected ...
3
votes
1answer
225 views

Can I fool keyloggers by simulating fake key strokes?

I am making a PC application with authentication. It is using a salted encryption and works well safety wise. Still my main concern now is with keyloggers. So I thought that maybe I could solve (in a ...
0
votes
1answer
80 views

Virtual machine against screenshot / key-logging trojans?

This question may sound naive to a security expert, but I guess that's why I'm here. x-) Would creating a virtual machine be any protection against potential trojans that monitor my system? My ...