Questions tagged [keyloggers]

A software (and sometimes hardware) module which perform keystroke logging (more often called keylogging or "keyloggers"), which is the action of tracking (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are being monitored. There are numerous keylogging methods, ranging from hardware and software-based approaches to electromagnetic and acoustic analysis.

Filter by
Sorted by
Tagged with
1
vote
2answers
73 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
0
votes
1answer
181 views

Was my password copied? [closed]

I work locally with a WordPress site. When I logged in, it looked like the password was highlighted. It went very fast. Half a second maybe. I found it strange that it looked like it was marked, as in ...
0
votes
0answers
18 views

What kind of attacks can a virtual keyboard limit? [duplicate]

If I was going to let someone typing using a virtual keyboard instead of a traditional physical keyboard for filling in a form or anything else with form submitting, what kinds of attacks can be ...
0
votes
4answers
127 views

Attacks on password-based encryption

Frequent attacks on password-based encryption are dictionary attacks with special hardware. I suspect that this is the only promising attack on the ciphertext. Is that correct? Another attack ...
1
vote
1answer
92 views

Question regarding keylogger references [closed]

For educational purposes I would like to learn how keyloggers have been made so far... from the simplest to most complex keyloggers. I can't seem to find a book focusing on them, most of the books I'...
5
votes
5answers
1k views

What's the safest way to enter information on a website?

On-screen keyboard you have to work with a mouse? Copy and paste? Type a string of random characters and then delete the extraneous ones? Something else?
2
votes
4answers
189 views

Can a wifi usb adapter double as a keylogger?

I've read that there are keylogger hardware and thought that usb wifi adapter are hardwares and wondered if they can be hacked to work as a keylogger. I'm just worried that my usb wifi adapter might ...
18
votes
6answers
45k views

How do I know if Google keyboard input is safe for use?

I wanted to send out a message containing some non-Latin characters on my Android phone. When I tried to change the keyboard input method, a warning came out: ATTENTION This input method may be ...
1
vote
1answer
78 views

preventing cross iframe key logging in javascript

We have a web application, where other partners can include their pages as iframes. We implemented a server-to-server way of authenticating users for the iframes, but one partner doesn't want to ...
0
votes
2answers
141 views

Can heuristic analysis detect keylogging?

Antivirus software detects threats by heuristic analysis like it analyzes the commands as they are performed, monitoring for common viral activities such as replication, file overwrites, and attempts ...
0
votes
1answer
60 views

iCloud Security Concern: browser session authentication storage after 2-factor?

Does anyone know how Safari or Chrome stores a www.icloud.com session authentication after logging in and passing 2-factor authentication? Is it stored in an encrypted cookie? My concern is, if ...
1
vote
2answers
83 views

What information can mouse recorders get?

In comparison to keyloggers, mouse recorders do not seem to be able to obtain much sensitive information. For example, passwords, credit card numbers, email addresses, names, passport numbers, etc. ...
-1
votes
2answers
87 views

Keylogging host from virtual machine

Can a keylogger in a virtual machine (guest OS) capture keystrokes in host OS? Is there any way to do it?
38
votes
2answers
27k views

How secure is “Secure Keyboard Entry” in Mac OS X's Terminal?

I've been using Terminal under Mac OS X for years but somehow missed to spot this feature: I'm now wondering how does this actually work, and is it 100% safe? If it isn't, what technique could be ...
-1
votes
5answers
400 views

How do keyloggers tell it's a password? (And how to fool them.)

This question also applies to clipboard monitoring. Imagine you are planning to deploy 100,000 copies of a Windows trojan with keylogger functionality. (For the record, I'm not talking about myself ...
-6
votes
6answers
21k views

Will antivirus detect all keyloggers?

Our company schedules Security Training courses for our personnel. In order for us to test them, we develop code such as keyloggers which we email to our personnel to detect stupid personnel, and of ...
0
votes
0answers
91 views

Are Configurable Keyboards a Security Risk (in your network)?

I purchased my first mechanical keyboard (Razer Black Widow Elite) and then quickly noticed that all the configuration of the keyboard MUST be done using the manufacturer cloud web app. There was not ...
1
vote
1answer
111 views

How secure is a Mac if it passes Apple Diagnostics?

Recently I brought my MacBook Air to a Genius Bar to perform a clean MacOS installation. For security purposes, I asked for a hardware check as well. The Genius Bar technician ran Apple Diagnostics, ...
3
votes
3answers
7k views

How effective is Windows Task Manager at identifying keyloggers?

I just hit upon an idea I have used in the past to distinguish between two instances of the same program, one of which was hung. While Task Manager is open and visible and sorted by CPU usage, I pick ...
0
votes
0answers
152 views

JS keylogger listening to what is being typed in an iframe?

Having discovered the X-Frame-Options sameorigin that stops a website from being shown in a iframe, I am trying to understand how far not having this header can go. What I am not sure about is if it'...
0
votes
0answers
45 views

Protect LUKS encrypted HDD against boot sector key stealing attack

I have HDD with GPT, 1 MiB BIOS boot partition and LUKS encrypted volume group with data. When I boot the computer, GRUB asks for passphrase. However, I want to run some untrusted application which ...
1
vote
1answer
171 views

Why it is difficult to write an application to protect 100% against keyloggers?

When you press keystrokes, I suppose you can intercept in low level code all applications that listen and record. Why it cannot be designed a software that protects 100% against keyloggers, simply ...
1
vote
1answer
62 views

Possible to control desktop data activity LED on Windows or Linux for data extraction? [closed]

I am trying to extract data from an air-gapped computer as a project. I already have a working prototype using high frequency sound and a key-logger. I would like to find another way to do it without ...
0
votes
1answer
95 views

Does Apple supply hardware keyloggers? [closed]

I received a brand new Mac laptop for work that is basically ours and doesn’t have to be returned, even after quitting. It was inside the box and sealed. I was wondering if Apple supplies and installs ...
1
vote
2answers
79 views

Where would I go to use a reliably secure encrypted internet connection?

Lately, I’ve been paying $100 a month for Fios. I’m thinking of canceling this service because I rarely use my internet at home, since I’m at school most of the time and my college offers internet (...
46
votes
6answers
10k views

Is the data between a keyboard and a web browser secure from local computer applications?

My question is about the text that I type on a keyboard while in a web browser. I understand that if the website has HTTPS the connection from my browser to the website is secure/encrypted, but what ...
46
votes
3answers
10k views

Are virtual keyboards not necessary anymore to protect against keyloggers?

My bank has issued a new version of their online banking site. This new version has no virtual keyboard to enter the PIN. I asked them how are they protecting me against keyloggers but I didn't ...
1
vote
1answer
74 views

Isn't Autohotkey effectively a keyspectator should I feel safe that I'm allowing this program to watch my keystrokes

Recently I started using Autohotkey just to automate some abbreviations so it's a hotstring e.g ::btw::by the way Replaces "btw" with "by the way" as soon as you press an default ending ...
2
votes
5answers
3k views

How to be safe from browser-based key loggers?

A browser-based keylogger usually comes in the form of a browser extension. It logs any or specific data entered anywhere in the browser. The problem is that they do not get caught by the system's ...
0
votes
1answer
374 views

How can I tell if a keyboard for android is safe?

Background: I am a normal smart phone user, with no experience in information security. I want to download a new keyboard for my Android 6 phone off Google Play, as my current keyboard is not great. I ...
18
votes
5answers
10k views

Keyboard sniffing through audio recorded typing patterns

I've been thinking about this for a while; I know people are aware of wireless wiretapping of keyboards. However, has there been research on how to wiretap keyboards based on typing patterns? I'm ...
1
vote
1answer
588 views

Keyboard entry obfuscation to defy keyloggers?

Do you know of any existing mechanisms for keyboard-entry-obfuscation to defy keyloggers? And if that exists does software such as (and in particular) VeraCrypt feature these? If such mechanisms don'...
0
votes
1answer
769 views

How can I detect possible spyware/keyloggers in my computer? [closed]

The reason is because of a recent data leak. I suspected that someone may have inserted keylogger to my computer. (a software, trojan). Some people think that the only way to really make sure there ...
1
vote
3answers
1k views

Could a hardware keylogger be installed in a laptop keyboard replacement?

I recently purchased a keyboard replacement for my laptop, manufactured out of country. Is it theoretically possible for a hardware keylogger to be installed? If so, would it be possible to transmit ...
0
votes
1answer
143 views

Are auto-type features of password managers actually effective against keyloggers?

Of course if you think of a "keylogger" as a program that can only read keystrokes, then copy-pasting on the clipboard is going to be enough. But we know that keyloggers are not really only "logging ...
0
votes
1answer
138 views

How to check if my PC's HTTPS/TLS connection is monitored or a key-logger is installed? [duplicate]

A few days ago, in the office, we were asked by our bosses to install a program. This was supposed to be an Antivirus program. But after installing this program many of our colleagues have been ...
0
votes
1answer
179 views

Apple iPhone Security

How difficult it would be to install an application that could record users keystrokes on an Apple device, for example, an iPhone X, and send it online without the knowledge of the user.
1
vote
0answers
663 views

What data is bitmoji keyboard collecting about me?

Bitmoji is a virtual keyboard for iOS and Android to create personalized emojis (very paraphrased). I've found a few blogs looking at the permissions it requests and the privacy policy that it shares ...
0
votes
2answers
871 views

Refurbished laptop computer - any advice?

I just recently bought a refurbished laptop. I have seen stories of refurbished phones being sold with spyware, trojans etc installed on them. My question is, what steps should I take (outside of ...
1
vote
2answers
614 views

How to analyze malware to find out where keylogger sent data?

Recently my antivirus detected some keyloggers that infected my network. I have those malware files and I want to analyze them. How can I do this analysis? It is important to find out details like ...
0
votes
1answer
392 views

How can I check if my second hand Apple wireless keyboard contains a keylogger?

I just got a cheap second-hand magic keyboard (Apple). Is there any way to check if it's been key logged? I cannot see any screws or openings other than the one for the battery pack.
7
votes
7answers
31k views

How safe/secure are banking applications on Android phones?

I have a mobile banking application installed on my phone which allows me to pay for things, transfer money using my phone from my account to another etc. How safe or unsafe is this application? For ...
3
votes
0answers
97 views

Need Security advice on virtualization and windows security

I have a little doubt about the security of my virtual machine and Windows. Can anyone please point me in right direction? Below is my what, how and why I made my virtual machine. Let me tell you ...
3
votes
1answer
507 views

Do pre-boot software keyloggers exist?

Let's sat for example that I have a laptop with just one hard drive running Windows 10. The Laptop's C:\ (boot) drive is encrypted using Bitlocker, and it set up to ask for a PIN on start to decrypt ...
7
votes
1answer
224 views

Healthcare company uses keyloggers for security purposes. Is this normal?

I just attended a recruitment session for a major healthcare provider in the United States. The presenter, a high-ranking member of one of their IT divisions (not security specifically) mentioned that ...
3
votes
1answer
3k views

does karabiner elements on Mac OSX contain or potentially contain malware?

I'm using Karabiner elements, an open-source program to remap the keys on my macbook air (running the latest Mac OSX High Sierra) and my apple wireless keyboard. It works very nicely. However, I am ...
1
vote
1answer
4k views

Teamviewer logging remote keystroke events

I'm connecting to a remote machine via Teamviewer, let's assume it's trusted. Is it possible for a MITM or virus on my local (client) machine to detect keys I enter using my remote machine's on-...
4
votes
1answer
202 views

Is it risky to use an untrusted keyboard?

Suppose you're buying a new keyboard (say USB-wired, but consider Bluetooth connected as well) from Ebay. Is it risky to use that keyboard in a sense that it could be more than just a keyboard? ...
59
votes
10answers
10k views

Why don't OS's make keystrokes available to only the current app?

Seems like a relatively obvious way to prevent (software) keylogging would be to force only the current (in-focus) app to be able to receive keystrokes. There could be a way to make explicit ...
0
votes
2answers
238 views

Would using a QWERTY keyboard with DVORAK output cause keylogger to log DVORAK?

I have QWERT keyboard, but I have set the keyboard settings in Windows to DVORAK. So if I type "test" it comes out as "y.oy". Would the key logger log "test" or "y.oy" in its records?