Guymon

Keylogging mit dem Accelerometer

Spannend, Forschern ist es gelungen über die DeviceOrientation API einen Keylogger zu programmieren, der zu 70% korrekt die Tasten erkennt.

Two researchers from the University of California Davis, Hao Chen and Lian Cai, have successfully divined the keystrokes on an Android on-screen keyboard by measuring the wiggles, jiggles, and vibrations picked up by the device’s accelerometer. This is significant because the data from accelerometers is not thought of as a potential attack vector, and is thus freely available to any application on any smartphone or tablet.

Keylogger für Apple

Iiii, häßlich:

APPLE KEYBOARDS ARE vulnerable to a hack that puts keyloggers and malware directly into the keyboard. This could be a serious problem, and now that the presentation and code is out there, the bad guys will surely be exploiting it.

(…)

It is completely remotely exploitable, and almost impossible to remove, especially if you don’t know it is there. This huge hole that Apple has in it’s hardware turns any remote exploit, Apple is full of them, into a huge security problem.

BND nutzt Online-Durchsuchung

In den vergangenen Jahren seien in mindestens 2500 Fällen Computer im Ausland infiltriert und Festplatteninhalte nach Pullach übermittelt worden. In weiteren Operationen installierten die BND-Mitarbeiter Keylogger, mit denen sie Tastatureingaben und damit Passwörter zum Beispiel für E-Mailfächer abgriffen.

via heise