I was just talking with someone on the phone about the two factor authentication discussed in the previous blog post. The discussion got into the topic of keystroke loggers and how prevalent they are. So I thought I'd post a few links here with some more background.
Over on Steve Lamb's Security Matters weblog, he points out that in checking some of the free download sites for keystroke loggers, they show hundreds of thousands of downloads. And that was back in 2006 that he checked.
There have been incidents of keystroke loggers installed in kiosks at major universities, at large financial payment processors (causing losses into the hundreds of millions of dollars), and just this past holiday season there was a digital picture frame that included a keystroke logger. That's right, that cute picture of your kids attached to the computer at your desk; it's stealing your password.
Heck, there's a even a site, keylogger.org, that is devoted to reviewing keystroke logging programs.
So adopting strategies like two factor authentication, IP address filtering, reviewing access logs for anomalies, etc. are more important than ever in our highly interconnected world.
© 2011 Grey Heller Solutions.
All rights reserved.