Password-Stealing Keyloggers on the Rampage

Password-Stealing Keyloggers on the Rampage

The number of keylogger variants let loose by hackers has touched a record-breaking 6,200 this year, up by 65% as compared to last year. Cyber theft groups are using keyloggers to steal information by recording the keystrokes on the infected computer.

According to cyber security intelligence provider iDefence each keylogger variant can infect thousands of computers and can steal personal information like account numbers and passwords. They are increasingly being used to steal confidential corporate data by recording keystrokes on the computers used by an enterprise. Hackers are making a fortune selling the stolen information.

“Keylogging is very effective method for hackers. Fraudsters can launch hundreds of keylogging attacks around the world in seconds, gathering sensitive data to conduct large-scale monetary transfers for their illegal activities,” said Joe Payne, vice-president, iDefence, now a division of VeriSign.

Sponsors

Spywares, email attachments and Instant Messaging are some of the numerous ways by which computers get infected by Keyloggers. Keyloggers enter into a system integrated into other malicious crimeware. They exploit the vulnerability of operating systems and web-browsers.

Enabled by rootkits, these programs go undetected by antivirus and antispyware. “Rootkit functionality is increasingly becoming part of keylogger technology. Keyloggers, adware and spyware, and rootkits, they're all coming together. Whatever can make an attack stealthier and make it last longer, that's where it's all at in criminals' minds” said said Ken Dunham, senior engineer with iDefence.

Keyloggers have cost a fortune to several victims. “There are so many victims because so few know the risk or the early warning signs; you simply can't stop what you can't see. In addition to basic protections like up-to-date anti-virus programs and well configured firewalls, the best defence for keylogging is to carefully track the organizations and hackers who promulgate these programs,” said Payne.