Questions tagged [keyloggers]

A software (and sometimes hardware) module which perform keystroke logging (more often called keylogging or "keyloggers"), which is the action of tracking (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are being monitored. There are numerous keylogging methods, ranging from hardware and software-based approaches to electromagnetic and acoustic analysis.

Filter by
Sorted by
Tagged with
4
votes
3answers
1k views

What's my exposure, and how to close it, from Conexant HD Audio Driver Package, CVE-2017-8360

I read about the key logging of the driver at modzero, and that it's apparently making all my keystrokes available. How much am I exposed by this, and can I reduce my exposure?
6
votes
2answers
6k views

How to detect a keylogger in a USB keyboard? Can a USB keyboard host a keylogger?

I recently got an USB keyboard. I want to investigate if the microcontroller of the keyboard may host a keylogger and how could it interact with a Windows OS. My understanding is that, once Windows ...
1
vote
0answers
38 views

How to remove a keylogger from MAC/how to reformat MAC to get rid of it? [duplicate]

I signed up to be a usability tester on a European site. I had to install software on my mac to complete a test. I had to use Disk Utility to install the dmg because just clicking it won't install. I ...
5
votes
1answer
212 views

Reality check: what actions should be taken if an hack attempt seems to be a false positive

Premise: Some time ago a friend of mine created a Microsoft based mail account (Live Id/Microsoft Account. He just needed the mail) to use for receiving some messages. The account was created and ...
1
vote
2answers
426 views

Is there any way to send malicious keystrokes to wireless keyboard USB dongle?

I have read many blogs on how to intercept wireless keyboard keystrokes. Similarly is there any way where we can send keystrokes to any keyboards USB receiver module? can we kick out the existing ...
2
votes
3answers
1k views

Storing password in sqlite vs asking user to type it in every time

I am making an Android app that needs to be very secure. For authentication to the server, it will use 2-factor authentication that includes: username/password sms verification I can't use client ...
0
votes
2answers
143 views

How unsecure is entering personal information via the keypad when phone banking?

A lot of banks I have dealt with require the customer to enter their customer number, internet banking password (or phone password) and date of birth all via the phone keypad, prior to being connected ...
2
votes
1answer
279 views

Can I fool keyloggers by simulating fake key strokes?

I am making a PC application with authentication. It is using a salted encryption and works well safety wise. Still my main concern now is with keyloggers. So I thought that maybe I could solve (in a ...
0
votes
1answer
84 views

Virtual machine against screenshot / key-logging trojans?

This question may sound naive to a security expert, but I guess that's why I'm here. x-) Would creating a virtual machine be any protection against potential trojans that monitor my system? My ...
2
votes
0answers
328 views

Looking for a specific story of a pen-tester who used a fake raffle to get a keylogger into a company

While reading about USB hardware keyloggers on the web a few months ago, I stumbled upon a story by a rather patient pen-tester: He organized a raffle where the first prize was a cool gamer ...
-4
votes
3answers
134 views

Capturing password typed in webpage - HTML replace [closed]

For a while I've been documenting some exploits (I was afraid about man-in-the-middle) and an idea came into my mind. When a user makes a request to a server, the browser might try to use http ...
1
vote
2answers
1k views

How to stop the “mitmf” tool on my home network?

Okay, so I am basically an electronics student so I have limited knowledge on the subject. So please help me out here. The thing is that one day, as I was browsing, I opened up Google and instead ...
0
votes
1answer
348 views

Intercept web traffic using Fiddler and add a keylogger function

Can we intercept the web traffic using Fiddler and inject a functionality such as key logger before the request being made to the server ?
4
votes
4answers
205 views

Could it be possible to hijack physical finger prints in digital form and use them to gain access to other devices and locations?

With more and more devices accepting finger prints in place of passwords, could it be possible to "keylog" these finger prints on mobile devices, for example, by installing a rogue application and ...
0
votes
2answers
120 views

Keylogging over the internet

Is it possible for a foreign entity to get a keylogger on your computer without physical access? Thinking of security of never-saved local passwords.
2
votes
5answers
3k views

How to be safe from browser-based key loggers?

A browser-based keylogger usually comes in the form of a browser extension. It logs any or specific data entered anywhere in the browser. The problem is that they do not get caught by the system's ...
2
votes
2answers
490 views

Is LastPass' Formfill inherently compromised?

Is there any sort of documentation to verify that the user info inputted with automatic formfill on "Secure forms" is protected from theft by a keylogger or trojan collecting clipboard data? I ask ...
-6
votes
2answers
17k views

Where does Windows 10 save Keyboard input? [closed]

Windows 10 seems to have a keylogger-like mechanic, according to this and this. I'm aware this is only to improve user experience. So I thought, since I can't remember my own PW that was used to ...
1
vote
1answer
3k views

Is it possible to trick a keylogger, when entering a password? [duplicate]

If I have to enter sensitive data like a password on a device/system I don't fully trust, because of a possible keylogger. Are there any (common) ways to trick the keylogger to don't get your ...
1
vote
1answer
52 views

Is there any tools out there to attack an unloaded system (on disk)

I was wondering : is there any tools related to unloaded system hacking ? I am asking this question because it seems to me that in a lot of case, people have access to random computer physical and ...
2
votes
1answer
233 views

How do I protect password enteries in Xorg?

I have been doing some reading about security issues with Xorg on Linux, and was surprised to find that you can keylog any GUI application using two shell commands... xinput list xinput test <id ...
3
votes
1answer
133 views

If a local user types in a password during a LogMeIn session on the local computer, can the remote user have it?

I assume this question without any keylogger help installed on the local computer. So is it possible that a remote user catch the password you have typed in on your local computer for a local soft ?
4
votes
3answers
1k views

Are Apple Magic Keyboards Secure Against Man-in-the-Middle Attacks?

Is Apple magic keyboard secure against man-in-the-middle attacks when it pairs to mac automatically? Recently I heard lots of wireless keyboards are vulnerable to eavesdropping. I don’t want my key ...
0
votes
1answer
126 views

Can heuristic analysis detect keylogging?

Antivirus software detects threats by heuristic analysis like it analyzes the commands as they are performed, monitoring for common viral activities such as replication, file overwrites, and attempts ...
0
votes
1answer
59 views

What is the state of the art on reading keystrokes based on vision?

In Citizen Four, we saw Snowden use the following head blanket: This doesn't look like a reasonable solution for casual situations, but it makes me wonder - what is the state of the art on reading ...
12
votes
3answers
2k views

Would a (password + combination of images) be stronger for user's login regarding keyloggers?

The scenario: We have a login system for a web application that requires a plaintext password and 3 images (from a collection of images that the users select during registration, the images are ...
1
vote
2answers
5k views

Does the use of an on-screen keyboard give a false sense of security or protect against all types of keyloggers? [duplicate]

Does the use of an on-screen keyboard (OSK) give a false sense of security? For example when people use the OSK in an attempt to prevent key-loggers from logging information like passwords, typed on ...
1
vote
2answers
344 views

Attacker knows what I do online and even has screenshots from my computer - how?

What can be achieved by hacking the Wi-Fi connection? Can you then use that to access somebody else's computer remotely, i.e., from their own house instead of across the street from me? I think ...
4
votes
1answer
238 views

Why doesn't standard antivirus detect commercial keyloggers? [duplicate]

I installed SSPRO (commercial keylogger) on my computer just for testing. Then I ran a scan with Eset Smart Security, and it failed to detect it. I also downloaded some free spyware removal programs ...
2
votes
5answers
1k views

What's the safest way to enter information on a website?

On-screen keyboard you have to work with a mouse? Copy and paste? Type a string of random characters and then delete the extraneous ones? Something else?
4
votes
1answer
242 views

Protecting against specialized Keepass attacks

If you look at the KeePass security information, it says: However in all the questions above we're assuming that there's a spyware program running on the system that's specialized on attacking ...
12
votes
3answers
2k views

Prevent keyloggers on Linux?

Are there any mechanisms in the Linux desktop architecture to prevent malicious software keyloggers? What would be an ideal Linux setup to make it very difficult for an attacker to install a keylogger ...
11
votes
1answer
1k views

Are keyboard hooks inherently malicious?

My software is using low-level keyboard and mouse Win32 hooks for legitimate reasons (if it's any relevant, it's for determining a change in the caret position of the active code pane in the VBA IDE). ...
22
votes
6answers
5k views

Why is it considered safe to install something as a non-root user in Linux environments?

We always hear it is safe to run unknown programs as non-root users in Linux because non-root users are sandboxed from the system level and can't change anything out of their permission scope. If ...
0
votes
2answers
955 views

Is it Social Engineering when a keylogger is installed from a compromised account on the domain?

So… this is a matter of definitions. Social Engineering (SE) is referred to as being related to psychological manipulation. The relation to manipulation is also prominent in the description made on ...
0
votes
1answer
541 views

Alternative to Avast Safezone for banking

Apparently low level keyloggers etc can intercept typed details before Safezone keylogging protection kicks in. Would BD Safepay avoid this problem with its enforced virtual keyboard ? Or perhaps ...
2
votes
3answers
455 views

Targeted acoustic keylogging attack prevention

To what level could this be applied to? Could someone record keystrokes on a keyboard and in combination with typing habits start to put together a picture of what the user is typing? If this is ...
21
votes
4answers
5k views

Keylogger web application protection

I'm trying to improve security in a web application. The application has an admin site and keyloggers are a concern that I'm trying to solve. Can the application do something that can prevent ...
2
votes
2answers
197 views

Keylogger transmitting photos when copy paste

In my work, I do a lot copy paste graphs or photos between folders. Can keyloggers steal these graphs or photos by transmitting them? Thanks.
1
vote
1answer
113 views

Benefits of injecting antivirus inside browser

Some antiviruses propose you to use their browser plug-ins. For instance, Avast SafeZone propose you reactive defend by checking signatures of keylogers/malware/spyware etc. But, what's the benefit ...
2
votes
2answers
926 views

SafeZone: keyloggers/malware/spyware protection

As part of Avast free updates you have a chance to use SafeZone browser. Among features of SafeZone browser I found that SafeZone protects you from keyloggers/malware/spyware. I'm interesting ...
4
votes
2answers
4k views

staying not signed in: is it the safest procedure?

each time I do connect to a private or public network I log into websites by keeping the option "stay signed in" or "keep me signed in" unselected, so I have to re-type my username and passwod as ...
30
votes
2answers
6k views

Keystroke logging and virtual machines

I wanted to know if someone can log my keystrokes if i am on a virtual machine. Is it more secure to use a computer or a virtual machine on that computer.
8
votes
4answers
835 views

When paying for something on line, is paying with a checking account less risky than paying with a credit card?

If I purchase something on line and am given the choice to pay with a checking account (also known as a current account) or a credit card, is the risk of my checking account data being stolen and used ...
2
votes
1answer
116 views

What other evidence can I obtain regarding this key-logger?

I have a computer that I know has had spyware installed on it (Perfect Key Logger). I have found the location of the key-logger and the date of creation, which is also I think the date of install. I'...
2
votes
2answers
124 views

why would keyloggers be used for stealing money less often than banking malware?

I read Kaspersky statistic and I saw this image : Why would keyloggers be used for stealing money less often than banking malware?
59
votes
10answers
10k views

Why don't OS's make keystrokes available to only the current app?

Seems like a relatively obvious way to prevent (software) keylogging would be to force only the current (in-focus) app to be able to receive keystrokes. There could be a way to make explicit ...
4
votes
3answers
4k views

Is it possible for a web page to log your keystrokes?

Is it possible to have a web page in Chrome open, and it can run a web app of sorts on the webpage, and have that web page log your keystrokes?
8
votes
4answers
459 views

School's computers auto-login and can run .exe's

Before this semester, to use any computer across campus, you had to log into Windows with a username and password. This semester, when the computers start up they auto-login to an account (with let'...
7
votes
1answer
919 views

Why Antiviruses does not check the library modules of exe to detect hook?

I write a simple keylogger by C# in Windows (using Hook method SetWindowsHookEx). I checked my application with most antivirus and anti-spyware programs, but none detect it. Why don't these antivirus ...