A keylogger is a program or hardware device that records every keystroke you make on your keyboard. If an attacker installs a keylogger on your computer, they can spy on your passwords, messages, emails and other sensitive information before it is encrypted.
The keylogger is silently installed via a phishing attachment, drive-by download or a rigged USB stick.
The program runs invisibly as a system process – no window, no icon, no visible sign for the victim.
Every keystroke is logged: passwords, credit card numbers, private messages, PINs.
The collected logs are regularly encrypted and sent to the attacker's server.
Software automatically filters login data, PINs and credit card details from the raw keystroke logs.
Email, banking, social media – every account the victim typed a password for is now compromised.
With a keylogger, attackers can steal your passwords, spy on your personal data, intercept online banking information, or misuse your identity. Because the keylogger records everything before it is encrypted, even "secure" websites are not protected against this threat. The consequences can range from data loss to financial damage.
1. Antivirus software: Install reliable antivirus and
anti-malware software and keep it up to date. It can detect and remove
keyloggers.
2. Regular updates: Keep your operating system and all
installed programs regularly updated. Security vulnerabilities are
often fixed by updates.
3. Safe browsing: Only download files from trusted
sources and be careful with email attachments. Many keyloggers are
spread via phishing emails.
4. Firewall and secure connections: Use a firewall and
secure HTTPS connections. Also check your keyboard for unknown hardware
devices.
Click into the input field and type – everything is recorded, just like a real keylogger.
Log in on the «secure» login page – and simultaneously see what a keylogger sends to the attacker in the background. The password appears as dots for you, but the attacker reads every letter in plain text.