Skip to main content

Malboard: Hackers can now pose as victims through their keyboards

Alexa, are keyboards going extinct? Wishful thinking, maybe, but according to a recent survey there's broad support for voice technology over tactile interfaces.

A new form of cyberattack has been developed by researchers which is able to mimic a user's identity through their keystrokes.

The continual evolution of cyberattacks and their increasing sophistication has led to a situation where signature-based antivirus products are no longer enough.

Security

A multi-layered approach to personal security -- including two-factor authentication (2FA) -- is slowly becoming commonplace in order to reduce our reliance on passwords alone.

The idea of verifying our identity through behavioral patterns, such as through keystrokes or mouse movements, is also being explored, but as Ben-Gurion University of the Negev (BGU) Malware Lab researchers have revealed, no single security solution is foolproof.

On Wednesday, the team said they have developed a new form of attack, dubbed Malboard, which is able to evade detection products "that are intended to continuously verify the user's identity based on personalized keystroke characteristics."

See also: CCTV cameras enslaved to infiltrate air-gap networks

It is not just the speed of keystrokes which can be used to verify a user -- how we respond to typographical errors and whether or not we tend to mistype particular characters are behavioral elements which can be used to verify our identity, too.  

In a paper published in the academic journal Computer and Security, available online, BGU showed how a compromised keyboard can be used to generate and send malicious keystrokes which mimic its victim.

The team used keyboards developed by Microsoft, Lenovo, and Dell in their research. The aim was to fool KeyTrac, TypingDNA and DuckHunt, which are all risk-based behavioral authentication systems.

These forms of software use AI-based algorithms and machine learning to analyze our keystrokes in order to add another layer of verification to user accounts. However, these same algorithms can also be used to fool them.

In order to develop Malboard, the team used behavioral data generated from 30 participants performing three different keystroke tests. This information was fed into the attack's underlying AI database and algorithms created by the system were pitted against the detection software.

A keyboard infected with Malboard was able to automatically generate keystrokes in the style of the participants by injecting keystroke movements "as malicious software." In 83 to 100 percent of the tests, KeyTrac, TypingDNA, and DuckHunt were fooled.

TechRepublic: 6 questions to consider before implementing a disaster recovery plan

According to Dr. Nir Nissim, head of the David and Janet Polak Family Malware Lab at Cyber@BGU, Malboard would be particularly effective in two scenarios; remote attacks launched by hackers wirelessly, or by inside attackers -- such as disgruntled employees -- who would be able to physically launch Malboard on a keyboard to compromise an internal system.

The paper also proposes detection modules which could be used to improve keyboard-based verification, including power consumption monitoring, keystroke sounds, and typographical error detection.

CNET: Scam artists reportedly stole $19 million worth of iPhones

"Each of the proposed detection modules is capable of detecting the Malboard attack in 100 percent of the cases, with no false positives," Nissim added. "Using them together as an ensemble detection framework will ensure that an organization is immune to the Malboard attack as well as other keystroke attacks."

The best beach reads for hackers in 2019 SEE FULL GALLERY 1 - 5 of 8

Previous and related coverage


Have a tip? Get in touch securely via WhatsApp | Signal at +447713 025 499, or over at Keybase: charlie0


14 Comments

I not to mention my guys ended up digesting the good tips and tricks located on your web site and then all of a sudden I had a horrible feeling I had not expressed respect to the web site owner for those tips. My young boys appeared to be totally excited to learn all of them and now have without a doubt been loving them. Many thanks for really being quite helpful and also for deciding on certain notable topics millions of individuals are really desperate to know about. Our own sincere regret for not saying thanks to earlier. jordan shoes http://www.jordan4.us.com

I definitely wanted to compose a quick comment so as to express gratitude to you for those great steps you are sharing at this website. My extensive internet research has at the end of the day been compensated with really good facts to talk about with my contacts. I would repeat that we visitors are quite blessed to dwell in a very good place with very many marvellous people with beneficial basics. I feel truly grateful to have used the site and look forward to some more enjoyable minutes reading here. Thanks a lot once again for all the details. nike air max 2017 http://www.air-max.us.com

I and my pals came reading the great suggestions on your web site then all of the sudden developed a horrible suspicion I never expressed respect to the site owner for those secrets. All of the young men happened to be for this reason warmed to study all of them and have very much been taking pleasure in them. Thanks for simply being quite thoughtful as well as for picking such excellent things millions of individuals are really wanting to be aware of. Our honest apologies for not expressing gratitude to sooner. adidas stan smith men http://www.adidasstansmith.us.com

I would like to show some appreciation to this writer for bailing me out of such a matter. After browsing throughout the online world and finding solutions which are not powerful, I believed my entire life was done. Existing devoid of the strategies to the difficulties you have solved by way of your entire website is a crucial case, and ones which could have badly affected my career if I hadn't discovered your web page. Your personal natural talent and kindness in maneuvering almost everything was helpful. I don't know what I would have done if I had not encountered such a thing like this. It's possible to now look forward to my future. Thank you very much for your impressive and result oriented help. I will not be reluctant to endorse your site to any person who requires tips about this subject matter. christian louboutin shoes http://www.christianlouboutinshoessale.com

Needed to draft you that very small observation to help thank you the moment again with your lovely methods you've shared at this time. This has been simply surprisingly open-handed of people like you to allow unreservedly precisely what a few individuals might have supplied for an e-book to earn some money for their own end, especially now that you could have done it if you ever considered necessary. The strategies as well worked to be a great way to comprehend many people have a similar desire just like mine to figure out significantly more in regard to this problem. I am certain there are many more enjoyable periods up front for individuals who looked over your site. valentino shoes http://www.valentinosshoes.us

I in addition to my guys came looking through the good suggestions located on your site and unexpectedly I got a terrible feeling I never thanked the web site owner for those techniques. Most of the people were very interested to read through all of them and have in effect in fact been tapping into those things. Many thanks for simply being quite considerate and also for settling on variety of important themes most people are really desperate to understand about. My very own sincere apologies for not expressing appreciation to sooner. curry shoes http://www.curry4.net

I just wanted to jot down a brief word to be able to express gratitude to you for those stunning solutions you are posting here. My time intensive internet look up has finally been paid with extremely good information to exchange with my good friends. I would declare that most of us site visitors actually are unequivocally endowed to live in a very good site with very many special individuals with helpful advice. I feel very blessed to have used your entire web pages and look forward to plenty of more amazing times reading here. Thanks again for everything. michael kors outlet http://www.michael--korsoutlet.us.org

I enjoy you because of your entire labor on this web page. My mom takes pleasure in conducting research and it is simple to grasp why. I learn all concerning the dynamic means you make priceless strategies via your web site and even cause response from some other people on that article then our favorite princess is actually learning a great deal. Have fun with the remaining portion of the new year. You're the one performing a tremendous job. jordan 13 http://www.jordan13.us.com

I intended to write you the tiny word to give many thanks yet again for those extraordinary solutions you've provided in this case. This has been really incredibly generous of people like you to present freely what exactly most people could have distributed as an electronic book to earn some dough on their own, notably considering the fact that you might well have done it if you ever considered necessary. These inspiring ideas in addition served as the great way to fully grasp other people online have the same dream really like my own to figure out lots more in regard to this issue. I am certain there are numerous more pleasant opportunities ahead for people who take a look at your blog post. off white jordan 1 http://www.offwhitexjordan1.com

I precisely had to appreciate you once more. I am not sure the things I could possibly have handled without the tricks shared by you on this field. It became a real scary dilemma in my view, however , taking note of your specialized style you treated the issue made me to weep over joy. Now i am grateful for your help and sincerely hope you recognize what a powerful job that you're putting in training men and women via a site. Most likely you have never encountered all of us. air max 270 http://www.airmax-270.com

My spouse and i got very joyous when Edward could conclude his researching from the ideas he gained out of the web pages. It is now and again perplexing to simply find yourself handing out concepts which other folks may have been trying to sell. We really fully grasp we now have the writer to appreciate because of that. The specific illustrations you made, the easy website navigation, the relationships you can aid to instill - it's got mostly fabulous, and it is helping our son and us believe that that content is thrilling, and that is exceptionally vital. Thanks for the whole thing! yeezy boost 350 http://www.yeezy-shoes.us.org

I must express my thanks to the writer for bailing me out of this type of problem. Right after checking throughout the online world and finding things which were not beneficial, I believed my life was over. Living without the presence of approaches to the issues you have fixed by way of your main write-up is a serious case, as well as those which may have adversely affected my entire career if I hadn't discovered the blog. That natural talent and kindness in touching everything was tremendous. I am not sure what I would've done if I had not come upon such a subject like this. It's possible to at this time relish my future. Thanks a lot very much for the specialized and amazing guide. I will not be reluctant to propose your web sites to any person who will need counselling on this subject. christian louboutin shoes http://www.christianlouboutin-shoes.com

I want to convey my gratitude for your generosity supporting visitors who absolutely need assistance with your situation. Your very own commitment to getting the message along became really functional and have always encouraged guys like me to achieve their goals. Your entire warm and friendly tips and hints signifies a great deal to me and extremely more to my office colleagues. With thanks; from all of us. nhl jerseys http://www.nhljerseysshop.us.com

Thanks so much for providing individuals with an exceptionally nice opportunity to discover important secrets from this web site. It's always very nice plus packed with amusement for me and my office mates to search your blog really 3 times in a week to read through the new items you will have. Of course, we're at all times motivated with the incredible inspiring ideas served by you. Selected 1 points in this post are certainly the most effective we've ever had. hogan outlet http://www.hogan-outlet.us.com

Add new comment

Plain text

  • No HTML tags allowed.
  • Lines and paragraphs break automatically.
  • Web page addresses and email addresses turn into links automatically.
The comment language code.