Keyloggers and Spywares

Keyloggers and Spywares

 Keystroke logging, often called keylogging, is the practice of noting (or logging) the keys 

struck on a keyboard, typically in a covert manner so that the person using the keyboard 

is unaware that such actions are being monitored.

 Keystroke logger or keylogger is quicker and easier way of capturing the passwords and 

monitoring the victims’ IT savvy behavior. It can be classified as software keylogger and 

hardware keylogger.

Software Keyloggers

 Software keyloggers are software programs installed on the computer systems which 

usually are located between the OS and the keyboard hardware, and every keystroke is 

recorded. Software keyloggers are installed on a computer system by Trojans or viruses without the 

knowledge of the user. 

 Cybercriminals always install such tools on the insecure computer systems available in 

public places (i.e., cybercafés, etc) and can obtain the required information about the 

victim very easily.

 A keylogger usually consists of two files that get installed in the same directory: a 

dynamic link library (DLL) file and an EXEcutable (EXE) file that installs the DLL file 

and triggers it to work. DLL does all the recording of keystrokes.

Hardware Keyloggers

 Hardware keyloggers are small hardware devices.

 These are connected to the PC and/or to the keyboard and save every keystroke into a file 

or in the memory of the hardware device.

 Cybercriminals install such devices on ATM machines to capture ATM Cards’ PINs.

 Each keypress on the keyboard of the ATM gets registered by these keyloggers.

 These keyloggers look like an integrated part of such systems; hence, bank customers are

unaware of their presence.

Antikeylogger

 Antikeylogger is a tool that can detect the keylogger installed on the computer system 

and can remove the tool. (Visit http://www.anti-keyloggers.com for more information)

Advantages of using antikeylogger are as follows:

1. Firewalls cannot detect the installations of keyloggers on the systems; hence, 

antikeyloggers can detect installations of keylogger.

2. This software does not require regular updates of signature bases to work effectively such 

as other antivirus and antispy programs; if not updated, it does not serve the purpose, 

which makes the users at risk.

3. Prevents Internet banking frauds. Passwords can be easily gained with the help of 

installing keyloggers.

4. It prevents ID theft (we will discuss it more in Chapter 5).

5. It secures E-Mail and instant messaging/chatting.

Antikeylogger

 Antikeylogger is a tool that can detect the keylogger installed on the computer system 

and can remove the tool. (Visit http://www.anti-keyloggers.com for more information)

Advantages of using antikeylogger are as follows:

1. Firewalls cannot detect the installations of keyloggers on the systems; hence, 

antikeyloggers can detect installations of keylogger.

2. This software does not require regular updates of signature bases to work effectively such 

as other antivirus and antispy programs; if not updated, it does not serve the purpose, 

which makes the users at risk.

3. Prevents Internet banking frauds. Passwords can be easily gained with the help of 

installing keyloggers.

4. It prevents ID theft (we will discuss it more in Chapter 5).

5. It secures E-Mail and instant messaging/chatting.

Spywares

 Spyware is a type of malware (i.e., malicious software) that is installed on computers 

which collects information about users without their knowledge.

 The presence of Spyware is typically hidden from the user; it is secretly installed on the 

user’s personal computer.

 Sometimes, however, Spywares such as keyloggers are installed by the owner of a

shared, corporate or public computer on purpose to secretly monitor other users.

Some Important Spywares are as follows:

Spy. Spector Pro. Spector Pro. 

eBlaster. Remotespy . Stealth Recorder Pro. 

Stealth Website Logger. Flexispy. Wiretap Professional.

PC PhoneHome. SpyArsenal Print Monitor Pro. 


Comments

Post a Comment

Popular posts from this blog

Early Disease Detection with Machine Learning and Deep Learning

 In today’s healthcare landscape, early detection of diseases is a game-changer. Identifying health conditions early not only improves patient outcomes but also reduces treatment costs. Machine learning (ML) and deep learning (DL) are revolutionizing this process, enabling healthcare systems to detect diseases with unprecedented accuracy and speed. Early detection of diseases like cancer, diabetes, and cardiovascular conditions can significantly improve survival rates. However, traditional diagnostic methods often rely on time-consuming tests and subjective interpretation, leading to delays or errors. Enter machine learning and deep learning: technologies that learn from vast datasets to identify patterns invisible to the human eye. Cancer Detection: DL algorithms have achieved radiologist-level accuracy in detecting breast cancer from mammograms. COVID-19 Diagnosis: AI models analyze chest CT scans to identify COVID-19 with high precision. Alzheimer’s Detection: ML models analy...
Read more

Transaction Processing Concept

 Transaction o The transaction is a set of logically related operation. It  contains a group of tasks. o A transaction is an action or series of actions. It is  performed by a single user to perform operations for  accessing the contents of the database. Example: Suppose an employee of bank transfers Rs 800 from  X's account to Y's account. This small transaction contains several  low-level tasks: X's Account 1. Open_Account(X)  2. Old_Balance = X.balance  3. New_Balance == Old_Balance - 800  4. X.balance = New_Balance  5. Close_Account(X)  Y's Account 1. Open_Account(Y)  2. Old_Balance = Y.balance  3. New_Balance = Old_Balance + 800  4. Y.balance = New_Balance  5. Close_Account(Y)  Operations of Transaction: Following are the main operations of transaction: Read(X): Read operation is used to read the value of X from the  database and stores it in a buffer in main memory. Write(X): Write operation is us...
Read more

Computer Forensics: An Overview

  Key Aspects of Computer Forensics 1. Phases of Computer Forensic Investigation A typical forensic investigation follows a structured process: a) Identification Detect and recognize potential digital evidence sources (e.g., computers, mobile devices, cloud storage). Identify key stakeholders, such as law enforcement agencies or corporate security teams. b) Preservation Secure digital evidence without tampering. Use write-blocking tools to prevent data alteration. Create forensic copies (bit-by-bit images) of storage devices. c) Analysis Examine data for traces of malicious activity, deleted files, hidden data, or encrypted content. Use forensic tools like EnCase, FTK, Autopsy, X-Ways Forensics to extract evidence. Reconstruct events using system logs, timestamps, and metadata. d) Documentation Record all findings systematically. Maintain chain-of-custody records to ensure admissibility in court. Generate forensic reports detailing the investigation process and conclusions. e) Pre...
Read more