An introduction to acoustic keyloggers
Conclusions
I have demonstrated a number of keylogging tools ranging from those that capture key presses to those that record typing audio. Even in their current iterations, these tools should give you pause. For some tips on protecting yourself from keyloggers, I recommend checking out this cursory discussion on the topic [20].
As AI advances over the next few years, keylogging tools will likely evolve. Until then, you might consider how many devices in your home have a microphone and perhaps reduce them in number. You might also want to sign out of your online accounts during video calls.
Infos
- "New acoustic attack steals data from keystrokes with 95% accuracy" by Bill Toulas, Bleeping Computer, August 5, 2023: https://www.bleepingcomputer.com/news/security/new-acoustic-attack-steals-data-from-keystrokes-with-95-percent-accuracy
- "AI-Powered 'BlackMamba' Keylogging Attack Evades Modern EDR Security" by Elizabeth Montalbano, Dark Reading, March 8, 2023: https://www.darkreading.com/endpoint/ai-blackmamba-keylogging-edr-security
- logkeys: https://github.com/kernc/logkeys
- logkeys documentation: https://github.com/kernc/logkeys/blob/master/docs/Documentation.md
- lkl: https://sourceforge.net/projects/lkl
- uberkey: https://linux.die.net/man/8/uberkey
- Side-channel attack: https://en.wikipedia.org/wiki/Side-channel_attack
- acoustic-keylogger: https://github.com/shoyo/acoustic-keylogger
- Jupyter: https://jupyter.org
- kbd-audio: https://github.com/ggerganov/kbd-audio
- kbd-audio demo: https://keytap.ggerganov.com
- keytap demo: https://www.youtube.com/watch?v=2OjzI9m7W10
- n-gram: https://en.wikipedia.org/wiki/N-gram
- n-gram frequencies: https://github.com/ggerganov/kbd-audio/discussions/31
- CTF challenge: https://ggerganov.github.io/keytap-challenge
- keytap2 demo: https://keytap2.ggerganov.com
- keytap3 demo: https://youtu.be/5aphvxpSt3o
- keytap3 GUI: https://keytap3-gui.ggerganov.com
- keytap3 test: https://keytap3.ggerganov.com
- Prevention tips: https://security.stackexchange.com/questions/119730/targeted-acoustic-keylogging-attack-prevention
« Previous 1 2 3
Buy this article as PDF
(incl. VAT)