Malware or device that records keystrokes to capture passwords, messages, and other typed information.
A keylogger records keystrokes on infected systems, capturing everything typed—passwords, credit card numbers, messages, and documents. Keyloggers can be software (malware running on the system) or hardware (physical devices attached to keyboards or cables). Captured data is sent to attackers for credential theft, identity fraud, or espionage. Keyloggers are particularly effective against services without multi-factor authentication, as captured passwords provide full access.
Why It Matters
The DSC Perspective:
Keyloggers explain why passwords alone aren't sufficient—MFA remains effective even if passwords are captured. They also demonstrate why physical security matters—hardware keyloggers require physical access to install.