MySpace mischief-maker Samy Kamkar has released a super-creepy keystroke logger for Microsoft wireless keyboards cunningly hidden inwards what appears to last a rather cheap, but performance USB wall charger.
The stealthy Arduino-based device, dubbed "KeySweeper", looks too functions simply similar a generic USB mobile charger, but genuinely sniffs, decrypts, logs, too reports dorsum all keystrokes from a Microsoft wireless keyboard.
"KeySweeper is a stealthy Ardunio-based device camouflaged every bit a wall charger that wirelessly sniffs, decrypts, logs too reports-back all keystrokes from whatever Microsoft wireless keyboard inwards the vicinity," Kamkar said.
The safety researcher has also released instructions on how to laid upwards the USB wall charger online too surprisinglyits is inexpensive to laid upwards too quite capable. KeySweeper includes a web-based tool for alive keystroke monitoring, capable to post SMS alerts for typed keystrokes, usernames, or URLs, too fifty-fifty continues to piece of occupation later on it is unplugged because of its rechargeable built-in battery.
"Even if nosotros exercise non know the MAC address, nosotros tin decrypt the keystroke. Using a few-dollar Arduino too a US$1 Nordic RF combat nosotros tin decrypt these packets too run across whatever keystroke of whatever keyboard inwards the vicinity that's using the Microsoft wireless keyboard protocol too it doesn't thing what OS is used."
Keysweeper stores the captured keystrokes both online too locally, too and hence post it dorsum to the KeySweeper operator over the Internet via an optional GSM chip.
Usually, Microsoft wireless keyboards encrypt their information earlier sending it wirelessly, but Kamkar claims to accept discovered several vulnerabilities inwards it that brand the information tardily to decrypt. Kamkar hasn't tested KeySweeper on every Microsoft wireless keyboard, but he believes that they volition all last vulnerable.
Kamkar hasn't simply outlined multiple vulnerabilities, but also released detailed instructions on how to laid upwards the device on GitHub. He's also produced a half-hour video on KeySweeper, which you lot tin scout below:
According to the researcher, the unit of measurement damage for KeySweeper ranges from $10 to $80, depending on which functions a user requires. The hardware breakdown is mentioned every bit follows:
- $3 – $30: An Arduino or Teensy microcontroller tin last used.
- $1: nRF24L01+ 2.4GHz RF Chip which communicates using GFSK over 2.4GHz.
- $6: air conditioning USB Charger for converting air conditioning ability to 5v DC.
- $2 (Optional): An optional SPI Serial Flash combat tin last used to shop keystrokes on.
- $45 (Optional): Adafruit has created a board called the FONA which allows you lot to usage a 2G SIM carte du jour to send/receive SMS, telephone calls, too usage the Internet straight from the device.
- $3 (Optional if using FONA): The FONA requires a mini-SIM carte du jour (not a micro-SIM).
- $5 (Optional, exclusively if using FONA): The FONA provides on-board LiPo/LiOn battery recharging, too piece KeySweeper is connected to air conditioning power, the battery volition last kept charged, but is required nonetheless.
Influenza A virus subtype H5N1 Microsoft spokesperson told VentureBeat that they "are aware of reports most a 'KeySweeper' device too are investigating."
