Keylogger

A Keylogger is software or hardware that tracks all keystrokes and keyboard events, usually without the user’s knowledge. Hackers use keyloggers to monitor all actions by the user of a computer or mobile device. A keylogger is a type of malware that can lead to the exploitation of you or your company. Keyloggers typically end up on your devices through hacker intervention in phishing attacks via a malicious attachment or through a malicious webpage.

Keyloggers aren’t always used maliciously and can be used in a variety of ways. This tool can be used as a form of Parental Control (tracking kids on the Internet), Company Security (tracking staff for non-work-related actions), or Law Enforcement (analyze and track criminal activity). 

What Does This Mean For My SMB?

Keyloggers will gain access to your device through standard hacker actions like Phishing campaigns and other malware. CyberHoot recommends the following best practices to protect individuals and businesses against, and limit damages from, online cyber attacks:

• Adopt a password manager for better personal/work password hygiene
• Require two-factor authentication on any SaaS solution or critical accounts
• Require 14+ character Passwords in your Governance Policies
• Train employees to spot and avoid email-based phishing attacks
• Check that employees can spot and avoid phishing emails by testing them
• Backup data using the 3-2-1 method
• Incorporate the Principle of Least Privilege
• Perform a risk assessment every two to three years