Sophos report looks at risks of keylogging

Keylogging attacks are on the rise according to cyber security company Sophos and its latest threat report. We look at keylogging and how to avoid it.

According to the SophosLabs 2021 Threat Report, cyber attackers are on the increase and becoming more innovative in the methods they are using. They’re exploiting vulnerabilities with a range of malware software including, keylogger attacks.

A keylogger is a form of spyware. When you enter sensitive data onto your keyboard,  you quite innocently believe nobody is watching. In fact, keylogging software is hard at work logging everything that you type.

Keyloggers are activity-monitoring software programmes that give hackers access to your personal data such as the passwords and credit card numbers you type and the webpages you visit – all by logging your keyboard strokes. The software is installed on your computer and records everything you type. Then it sends this log file to a server, where cybercriminals wait to make use of all this sensitive information.

However, not all keylogging is illegal they do have legitimate, useful applications. For example, keyloggers are often used by IT departments to troubleshoot problems. Also, they can keep an eye on employee activities, which is perfectly legitimate. And on a personal level, you can keep an eye on what your kids are up to on your computer.

Keylogging becomes a crime if there is malicious intent. Simply put, if you install a keylogger on a device you own, it is legal. If a keylogger is installed behind the back of the actual owner to steal data, it is illegal.

Attack tactics like phishing and social engineering are some of the common ways keyloggers are installed. But there is another way this software can find its way to your computer. Imagine a scenario where you make your way to a file-sharing site and choose a software download, by doing so keyloggers can infiltrate your safe computer.

How can you avoid keylogging?

According to Sophos Labs prevention is better than cure and if you think your computer is a target for keyloggers, keep checking for unwanted software, and delete it. Sophos Labs other tips for avoiding keylogging include:

Don’t download files from unknown sources.

While entering password information on banking sites, use a virtual keyboard; in fact, use a virtual keyboard wherever possible.

Use a password manager, as the manager will automatically enter the password, making keystrokes redundant (no keystroke, no keystroke logging).

Use a powerful and next-gen antivirus and internet security suite that can keep your personal computer safe from advanced and evolved cyberattacks and identify and remove malicious software for you.

About Sophos 

Sophos protects over 450,000 organisations of all sizes in more than 150 countries from today’s most advanced cyber threats. The business also works with home users through its Sophos Home brand.



Featured Articles

AWS launches 2023 European Defence Accelerator for startups

AWS is launching its European Defence Accelerator, open to startups interested in doing business with defence and national security organisations

Gartner unveils top cybersecurity predictions for 2023-2024

Half of CISOs will formally adopt human-centric design practices into their cybersecurity programmes, while adoption of zero trust architecture will rise

DDoS protection market to grow amid increase in attacks

According to research by Cloudflare, DDoS attacks increased by 109% last year, with the last 12 months seeing some of the largest attacks the world

The impact data poisoning has on cyber and AI

Cyber Security

Five innovative ways AI can help prevent cyber attacks

Cyber Security

SailPoint delivers new non-employee risk management solution

Cyber Security