Keystroke logging
Keystroke loggers represent an insidious threat to computer users that continues to
increase. They work by recording the sequence of key-strokes that a user types in.
More highly-developed keystroke loggers only record keystroke sequences such as
email addresses and passwords.
There are two forms of keystroke loggers - a hardware device or a software keystroke
logger. The hardware device may be plugged into the back of the computer or keyboard,
or it could be inside the computer itself. Logging devices fitted inside a computer are
obviously harder to detect. Software keystroke loggers may be inadvertently
downloaded from a malicious website, installed in a Trojan-horse attack, or via a
hacking attack.
The stolen data can be recovered by physically removing the device or by sending
traffic over a network or internet. Once recovered the recorded passwords can be
used to access the computer user’s bank accounts via internet banking, in effect
stealing the user’s money.
|
|