A software (and sometimes hardware) module which perform keystroke logging (more often called keylogging or "keyloggers"), which is the action of tracking (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are ...

learn more… | top users | synonyms

2
votes
5answers
240 views

What's the safest way to enter information on a website?

On-screen keyboard you have to work with a mouse? Copy and paste? Type a string of random characters and then delete the extraneous ones? Something else?
2
votes
1answer
49 views

Protecting against specialized Keepass attacks

If you look at the KeePass security information, it says: However in all the questions above we're assuming that there's a spyware program running on the system that's specialized on attacking ...
10
votes
1answer
155 views

Prevent keyloggers on Linux?

Are there any mechanisms in the Linux desktop architecture to prevent malicious software keyloggers? What would be an ideal Linux setup to make it very difficult for an attacker to install a keylogger ...
10
votes
1answer
547 views

Are keyboard hooks inherently malicious?

My software is using low-level keyboard and mouse Win32 hooks for legitimate reasons (if it's any relevant, it's for determining a change in the caret position of the active code pane in the VBA IDE). ...
19
votes
6answers
4k views

Why is it considered safe to install something as a non-root user in Linux environments?

We always hear it is safe to run unknown programs as non-root users in Linux because non-root users are sandboxed from the system level and can't change anything out of their permission scope. If ...
0
votes
2answers
79 views

Is it Social Engineering when a keylogger is installed from a compromised account on the domain?

So… this is a matter of definitions. Social Engineering (SE) is referred to as being related to psychological manipulation. The relation to manipulation is also prominent in the description made on ...
0
votes
1answer
52 views

Alternative to Avast Safezone for banking

Apparently low level keyloggers etc can intercept typed details before Safezone keylogging protection kicks in. Would BD Safepay avoid this problem with its enforced virtual keyboard ? Or perhaps ...
3
votes
3answers
92 views

Targeted acoustic keylogging attack prevention

To what level could this be applied to? Could someone record keystrokes on a keyboard and in combination with typing habits start to put together a picture of what the user is typing? If this is ...
21
votes
4answers
4k views

Keylogger web application protection

I'm trying to improve security in a web application. The application has an admin site and keyloggers are a concern that I'm trying to solve. Can the application do something that can prevent ...
2
votes
2answers
64 views

Keylogger transmitting photos when copy paste

In my work, I do a lot copy paste graphs or photos between folders. Can keyloggers steal these graphs or photos by transmitting them? Thanks.
1
vote
1answer
91 views

Benefits of injecting antivirus inside browser

Some antiviruses propose you to use their browser plug-ins. For instance, Avast SafeZone propose you reactive defend by checking signatures of keylogers/malware/spyware etc. But, what's the benefit ...
1
vote
2answers
187 views

SafeZone: keyloggers/malware/spyware protection

As part of Avast free updates you have a chance to use SafeZone browser. Among features of SafeZone browser I found that SafeZone protects you from keyloggers/malware/spyware. I'm interesting ...
2
votes
2answers
146 views

staying not signed in: is it the safest procedure?

each time I do connect to a private or public network I log into websites by keeping the option "stay signed in" or "keep me signed in" unselected, so I have to re-type my username and passwod as ...
24
votes
2answers
3k views

Keystroke logging and virtual machines

I wanted to know if someone can log my keystrokes if i am on a virtual machine. Is it more secure to use a computer or a virtual machine on that computer.
8
votes
4answers
789 views

When paying for something on line, is paying with a checking account less risky than paying with a credit card?

If I purchase something on line and am given the choice to pay with a checking account (also known as a current account) or a credit card, is the risk of my checking account data being stolen and used ...
2
votes
1answer
71 views

What other evidence can I obtain regarding this key-logger?

I have a computer that I know has had spyware installed on it (Perfect Key Logger). I have found the location of the key-logger and the date of creation, which is also I think the date of install. I'...
1
vote
2answers
95 views

why would keyloggers be used for stealing money less often than banking malware?

I read Kaspersky statistic and I saw this image : Why would keyloggers be used for stealing money less often than banking malware?
56
votes
9answers
10k views

Why don't OS's make keystrokes available to only the current app?

Seems like a relatively obvious way to prevent (software) keylogging would be to force only the current (in-focus) app to be able to receive keystrokes. There could be a way to make explicit ...
2
votes
3answers
172 views

Is it possible for a web page to log your keystrokes?

Is it possible to have a web page in Chrome open, and it can run a web app of sorts on the webpage, and have that web page log your keystrokes?
8
votes
4answers
333 views

School's computers auto-login and can run .exe's

Before this semester, to use any computer across campus, you had to log into Windows with a username and password. This semester, when the computers start up they auto-login to an account (with let'...
6
votes
1answer
408 views

Why Antiviruses does not check the library modules of exe to detect hook?

I write a simple keylogger by C# in Windows (using Hook method SetWindowsHookEx). I checked my application with most antivirus and anti-spyware programs, but none detect it. Why don't these antivirus ...
4
votes
2answers
878 views

Malware (adware?) infection on linux

Recently I've get stuck with a malware(adware/virus ?) which I can't remove. here is the condition: I'm using Linux (Archlinux), it's uptodate and I don't install any packages outside standard repos ...
2
votes
1answer
251 views

Can BIOS firmware log keyboard input? If so, is there any way to detect and prevent it?

Recently I purchased a server board made by Lenovo with a "Intel Management Engine" inside BIOS. It is said that it is able to intercept and redirect keyboard input, even if an operating system is ...
1
vote
1answer
265 views

How to detect if a system is infected by key logger or not?

Assume that you want to login your Gmail account on your friend's laptop and you are doubt if he installed a keylogger on his computer. How you can be sure if there is any key logger installed or not?
1
vote
0answers
80 views

Are there any tools out there that can 'trick' keyloggers?

Are there any tools out there that can 'trick' keyloggers? I was wondering if there's any 'enigma-style' tools available along the lines of providing time-randomised keyboard mappings. For example: ...
1
vote
1answer
74 views

Question regarding keylogger references [closed]

For educational purposes I would like to learn how keyloggers have been made so far... from the simplest to most complex keyloggers. I can't seem to find a book focusing on them, most of the books I'...
8
votes
1answer
65 views

GnuPG passphrase entry and X11 sniffing

Each time when I’m entering my passphrase in pinentry-gtk-2, every other X11 app may sniff it, as seen in $ xinput test-xi2 running in the background. What can be done about it? Or do I have to ...
3
votes
1answer
148 views

Are Keystroke and Click Loggers Legal? [closed]

I worked with the firewall "Nobero" which is paid and bit expensive. It is a complete Network Firewall including groups policy, banning URLs and social sites. But It has a feature of tracking users' ...
2
votes
1answer
108 views

Is drag-and-drop safer than using the clipboard when it comes to protecting sensitive data from keyloggers?

I noticed that multiple password-locker applications recommend that you use the drag-and-drop feature to transfer passwords to login forms instead of copying the passwords to the clipboard or having ...
6
votes
2answers
186 views

GUI isolation in X11 when entering Truecrypt password

I have been getting a bit paranoid regarding some of my old TrueCrypt containers. The paranoia has got nothing to do with suspicions regarding TrueCrypt itself (after the shut-down last year), rather ...
1
vote
1answer
179 views

What else can be done for better security against keylogging softwares? [duplicate]

I've been hearing about keyloggers for the past two years, but never took them seriously. Now, as I've started net banking and managing social networking accounts, I'm very much concerned about safety....
4
votes
1answer
116 views

What security problems does copying .Xauthority to another user present?

If I want to use a GUI application with another user (example: webbrowser), I can copy the .Xauthority file to that given user's home then I can "su - user" and start the GUI app. Question: but what ...
0
votes
1answer
358 views

Is it possible to detect a keylogger, when placed? [duplicate]

Can you detect a keylogger when it is placed? Would it be possible to do that via a keyboard removed event, expecting the keyboard is not removed regularly? So that you for example get a pop-up/alert ...
5
votes
2answers
713 views

Can serving HTTPS to Internet Explorer on Windows XP be made secure?

Answers to Why is HTTPS not the default protocol? state that a lot of sites still use clear HTTP instead of HTTPS because all of these are true: A substantial number of visitors to the site use ...
10
votes
5answers
11k views

How do I know if Google keyboard input is safe for use?

I wanted to send out a message containing some non-Latin characters on my Android phone. When I tried to change the keyboard input method, a warning came out: ATTENTION This input method may be ...
1
vote
1answer
432 views

Spying on insulated cables (electromagnetic/induction field)

I hope this is the right forum to ask this question. If not, please tell me where to go. From my understanding most cables have an electromagnetic field around them when data passes through them and ...
0
votes
3answers
305 views

Why are keyloggers a problem for password managers?

Reading the API definition of SetWindowsHookEx, I see Calling the CallNextHookEx function to chain to the next hook procedure is optional, but it is highly recommended; otherwise, other ...
1
vote
2answers
578 views

Unregistering keyboard hooks by timeout expiration

I'm writing a password manager for Windows which I want to protect against keyloggers. There is a timeout of 5000 ms for keyboard hooks. The hook procedure should process a message in less time ...
-1
votes
1answer
7k views

Writing keylogger and viruses in python [closed]

So recently I have been working on some projects one of them is keylogger and the second is SYNflood (both in python). I want to know if ,is it a good practice to use python language for such purposes?...
3
votes
3answers
655 views

Password entry on OS X and keyloggers

There's several places in my ‘personal security infrastructure’ (is there a better phrase for that?) where I find myself typing very important passwords into text-fields on OS X (for instance, dis-...
0
votes
0answers
106 views

Secure password transfer from stdout to another window

I am currently trying to build a little, secure password manager. As of now, I've implemented the encryption. Each website has its own file and each file has a number of fields (Most commonly username ...
1
vote
1answer
642 views

Could a hardware keylogger be detected through measuring USB micro voltage?

All in all, hardware keyloggers are harder to detect. But if computers can measure the exact voltage consumption of their peripherals, could a hardware keylogger be detected by comparing the normal ...
1
vote
2answers
1k views

How do hackers deploy keyloggers?

I know the use of keyloggers. What I wish to know is how a hacker can install the keylogger onto the victim's system? If it can be done by XSS then to where this keylogger is actually installed (I ...
0
votes
1answer
324 views

Keyboard “eavesdropping” just got way easier, thanks to electromagnetic emanations

Just found this article which basically suggests that electromagnetic emanations can be used to eavesdrop on what you're typing. http://www.engadget.com/2008/10/20/keyboard-eavesdropping-just-got-way-...
6
votes
1answer
123 views

Shared clipboard on Linux without keylogging, etc. vulnerabilities?

X has some serious security problems, not the least of which is that any program using a given display can log keystrokes from any other program on that display. (This can be demonstrated easily using ...
7
votes
7answers
14k views

How safe/secure are banking applications on Android phones?

I have a mobile banking application installed on my phone which allows me to pay for things, transfer money using my phone from my account to another etc. How safe or unsafe is this application? For ...
2
votes
2answers
407 views

How can one find keyloggers in javascript?

Assuming no XSS and a client-side only page, how can a keylogger be identified in javascript code? Should I simply look for the id of the targeted fields and possibly some sort of DOM traversal to ...
0
votes
2answers
360 views

How can a keylogger gather and transmit data from a client-only webapp run from file?

For a client-side only webapp run from file, how can a keylogger gather data and then transmit it? In this scenario, please limit the scope to the client code only, that an attacker somehow has ...
1
vote
2answers
75 views

Sign contents of entire computer?

If I travel abroad and am concerned that when I land in the foreign country they may try to install a digital keylogger, does this work as a potential solution: If I sign my entire computer's hard ...
1
vote
2answers
366 views

Online Shopping password keylogger risk

Suppose I do an online shopping they are asking me to enter my card details like four digit number(whatever related to that) and they are asking me to enter the PIN number too. If I enter all this ...