Keyboard Threat

Hi AO's

i got this email from a friend who is not that attached to the computers and stuff related to new technology

but i just wanted to highlight this for a suggestions and comments

and attached are the photos of the device

Quote:

---

Attention Please

PLEASE BE CAREFUL WHENEVER YOU'RE USING A PC AT A PUBLIC PLACE (Like INTERNET CAFES.. ETC ).
CHECK THE BACK OF THE PC AND SEE IF THE BELOW DEVICE IS THERE..IF SO..DO NOT USE IT!!!!


New storing device fits at the end of the keyboard cable connecting to the PC specialized to save all typed keys in it... Mostly could be used in net cafes, exhibitions, hotels and airports therefore be careful especially the people who use the internet in these places to enter their bank accounts online or any other important sites.
After you enter the bank account and leave the PC it will be easy to open your account again as all what you have typed has been saved in the Black device.
Therefore, you should check the PC for any suspicious piece behind it before using the net in public places for important sites.
Please send it to all who you know to educate them against this fraud.

---

Regards
KK

While most of us are aware of these keylogging devices, it's good to bring them up now and again to remind the newer users of computers about the seemingly innocuous or forgotten threats faced by the users of public computing stations. Good on you for that, KK.

O

If you find one, "take it into protective custody"...... they cost :lildevil:

The downside is they are pretty obvious and easy to steal, and the owner can't really say much, as what they are doing is generally illegal.

The upside is that they are undetectable by software scanners.

In reality, you should never use a public place for anything sensitive. You don't have the time to scan the desktop for malware, and you do not have any control over the devices that the data subsequently passes through.

YEs im sure my mother is going to look at the back of the computer for a hardware device. sure...

Anyway thanks for the heads up.

Yes i was aware about it too

but the fact is i actually didnt knew is more subsequent details of it which i suppose is being highlighted now.

any ways i dont think so people are aware of this minute little device instead even if they see it they would not even bother to touch thinking that it is some kind of a extension cable device


1) But one more question if we use a cleaner "ccleaner" will that be able to delete those logs in the device?

2) and is this device been approved by the cyber crime cell as a hacking device?

I've "captured" a few of these over the years, i always make a habit of scanning the back of a workstation when ever i am at a foreign desktop.
I'll ever remove the contraption and hand it in. Or just casually slip it into my pocket and add it to my collection.:D

I have never seen one on a PC TBH but I do alot of CC transactions at an Internet Cafe for some reason :)

Ill be on the lookout for it.

Is it legal to inspect the box if it is concealed in a closed shelf or wood around it?

KK,

1. A system cleaner such as CCleaner won't do anything, firstly because they only clean known system files, and secondly, because the device is totally invisible to the system it is installed on. It is "stand alone" with its own software and memory. Think of it as being something like one of those USB memory sticks.

2. It is as legal as a software keylogger. It all depends on the law in your particular region. In some countries you have to declare monitoring PC activity, just like you have to declare recording telephone conversations.

Quote:

---

any ways i dont think so people are aware of this minute little device instead even if they see it they would not even bother to touch thinking that it is some kind of a extension cable device

---

I know what you mean. Right now I have two little devices on my bench that look pretty similar to the untrained eye. These are USB to PS/2 converters, and people might think that the keylogger was some sort of converter, or an antistatic device or a signal booster. Next to them I have a 2Gb USB memory stick........... if anything it is slightly smaller, so in theory you could store an enormous number of keystrokes on one of these devices.

The givaway is that converters tend to be asymetrical, due to the different size/shape of the connections.

@ t34b4g5,

Have you ever tried microwaving one?............. I understand that they don't like it :lildevil:

How does these things work?

Send out the info via email or wait for someone to take it off the device?

i.e unplugging the device and taking it home.

This is when you hijack the person :P

The ones I have seen would require removal from the target machine and attaching to a machine with the management software on it. The basic idea of these devices is that they do not interact with the PC, only with the keyboard, so they are undetectable by security software.

OK, I hear you say, but they are pretty bloody obvious aren't they?............. well yes, they are, but only if you look and know what you are looking at. The average user probably never looks round the back of a computer at all, and in many office environments I have experienced, the actual computer is tucked away under a desk so it would take a fairly determined effort to get to it.

I see three potentially vulnerable environments:

1. A corporate or institutional network, particularly if it is multi-site. Here the admins can remotely scan for malware, block traffic, analyse traffic and so on. They cannot spot a physical keylogger though. Sure, it would have to be an inside job, but do you know who works for your office cleaning company or security service?............... do they know?

2. Internet Cafe: pretty obvious, but the owner or manager should be vigilant and there should be some sort of enclosure to prevent access to the ports.

Quote:

---

Is it legal to inspect the box if it is concealed in a closed shelf or wood around it?

---

Non-destructive inspection is generally "legal", but only if she is a consenting adult :D

I don't like the idea of what you are suggesting............. sounds like a recipe for heating and ventilation problems. I prefer using "expanded metal" such as is used in security screens.

3. The internet games room. I don't know if you have these, but with all Public Libraries providing free access as well as local government and other sites providing wireless hotspots, these are more common than the internet cafe over here. Scumbags are very avid in trying to steal your "gelt" or whatever, so they want your ID and password. Once again, the security should be the same as for a wireless cafe, but....................can you trust the owner/manager?

Quote:

---

This is when you hijack the person :P

---

Well, not quite, it is at that moment in time that the green curved device with "this side towards the enemy" embossed on it, is activated :zap:

Quote:

---

I have never seen one on a PC TBH but I do alot of CC transactions at an Internet Cafe for some reason

---

This implies that you are getting paid whilst AO is doing all the work? :bigpimp:

// off topic//

Can you get hold of those Zimbabwe banknotes for millions of whatevers (dollars?).............. I have an idea for making some AOers some money for Christmas ;)............ and yourself of course!

Just be careful liberating these keyloggers. If you get caught, they might think you put it there.

Quote:

---

Originally Posted by CyberB0b

Just be careful liberating these keyloggers. If you get caught, they might think you put it there.

---

lol i was caught removing one earlier last year, i was lucky that the person at the cafe had a idea about tech stuff so a quick explanation, a review or the security tape revealed i was clear.

They discovered it was one of there other staff members whom was stealing ebay / paypal credentials.

And johnno, i have not tried nor thought about trying out the microwave suggestion. I would throw one in the microwave but i'm sure the missus would tear me a new one if i destroyed this microwave like i did the last one..

Mee and my crazy ideas:eek:

I'd setup a purely open wireless network with the idea that I can both view and edit the content people are browseing. Restruants and cafe's shouldn't have any problem doing the same thing.

Keylogging sounds so uh... 1990s.

Good idea there ... Well I went to an internet cafe yesterday jsut to see the setup and their cases were in a closed container so I couldnt really check...

Where do you get these hardware key loggers, I am sure they are used for legal purposes for something and are freely available?

Quote:

---

I'd setup a purely open wireless network

---

That would imply that you were the administrator?

Quote:

---

Keylogging sounds so uh... 1990s.

---

Yes, just as wiretaps and bugs are 1940/50s, but they are still used today.

The presence of a hardware keylogger suggests an attack by a third party who does not have sufficient authority to install a software one and/or is afraid of it being discovered by a software scan.

I would guess that 95% of non-IT users are not aware that these things exist, even though they might be aware of software keyloggers.

EDIT @Cider

http://www.google.co.uk/products?cli...le&output=html

Thanks Nihil

Records a years worth of typing, OMG!!!!!

I suppose that the intruder will have to sift through the code or probaly use a software program.

BTW: Why are these for sale? WHat are they used for "legally"

Cider,

As far as I know they do exactly the same as a software keylogger, only offline and outside of the target PC. I would imagine that they have some sort of management application, just like the software versions?

I am not sure of a legal use, but I suppose that if you want to permanently monitor a large number of machines on a network, you don't want them running locally and phoning home because of bandwidth and performance issues. Similarly if stuff is stored on the local machine it would be potentially vulnerable. These devices do the same thing as installed software, but without any performance or bandwidth issues.

Personally I agree with The-Spec in that keylogging is pretty much an obsolete concept from a network environment viewpoint. There are plenty of network security and management tools around, that control things by exception, and are far easier to interpret.

However they are still very much current for criminal activity.;)

Quote:

---

Originally Posted by nihil

Can you get hold of those Zimbabwe banknotes for millions of whatevers (dollars?).............. I have an idea for making some AOers some money for Christmas ............ and yourself of course!

---

oohhh....hmmmm-- Count me in!

Quote:

---

Originally Posted by nihil

That would imply that you were the administrator?

---

nihil, we all know the answer to that question :D
;)

Ok, silly question, but they the need for devices when there's plenty of software out there that does the same thing?

Are they just getting lazy now?

Or perhaps this is for use by thieves who don't have access to install the software?