Full Disclosure mailing list archives

RE: Re: pgp passphrase


From: "Federated Information Security" <FederatedInformationSecurity () federatedinv com>
Date: Mon, 22 Mar 2004 07:53:41 -0500

I actually found a variant of the downloader trojan that had a really
nice keylogger trojan that logged keystrokes by process name in an .ini
type format.

-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of Alain
Crespo
Sent: Sunday, March 21, 2004 5:34 PM
To: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] Re: pgp passphrase


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 21 March 2004 18:54, Frank Knobbe wrote:
On Sat, 2004-03-20 at 19:41, Max Valdez wrote:
Keylogger ?

Intelligent enoght to know wish keystrokes are passphrase ??

Nah, keyloggers don't have to be intelligent, they just have to log 
data. It is *you* that needs to be intelligent when reviewing the 
captured key strokes.

Keyloggers also can store the window name and the text field name where
it is 
typed. 
And then, no intelligence is needed. ;)

- -- 

_,.-:*"``'*:-.,_,.-:*"``'*:-.,_,.-:*"``'*:-.,_,.-:*"``'*:-.,_,.-:*"``'*:
-.,_,.-:*"``'*:-.,_,.-:*"``'*:-.,_,.-:*"``'*:-.,_,.-:*"``'*:-.,_,.-:*"``
'*:-.,_

un saludo,

Alain Crespo <gazpa () euskalnet net>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAXhhYP3/+R0rF2wkRAqEvAJ0SuW3Bf+JQSp5+apDl7MDqHFGssgCgqpMN
0G0HL0BtyyS3r5L3lFS3RuA=
=p8F3
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: