Knowledge / malware identity acsc-glossary

Keylogger

Software (or hardware) that records typing. Credentials and payments are the usual prize. This desk does not document how to build one.

A keylogger captures keystrokes so someone else can replay what was typed: logins, messages, card numbers. Software variants arrive as malware. Hardware variants sit between the keyboard and the machine. Either way the defence is not 'type faster'.

Reduce the prize: password managers (you paste or autofill instead of typing), phishing-resistant MFA so a captured password is not enough, EDR, and physical control of workstations. If a shared kiosk must exist, it does not get finance or admin logins.

Fact source: ASD's ACSC glossary.