HP Laptops Secretly Record User Keystrokes,
Security Firm Says
Wake Up Wall Street: Trump Signs Executive Order on Cybersecurity
HP's (HPQ) laptops have been recording the keystrokes of users, a Swiss security research firm has claimed, which could expose sensitive information such as passwords.
In an advisory note Modzero said a Conexant audio driver for headphones, which is installed on the laptops, records a user's keystrokes.
Modzero said the program runs after each user login. The program records all keystrokes made by the user to an easily readable file.
The program appears to be on 28 models of the HP EliteBoook, Probook and Zbook running Window 7 and Windows 10.
SMALL INVESTMENT, BIG POTENTIAL. TheStreet's Stocks Under $10 has identified a handful of stocks with serious upside potential. See them FREE for 14-days.
Modzero said it leads to a high risk of leaking sensitive user information to any one that can access the files.
"Investigators with access to the unencrypted file-system might be able to recover sensitive data of historic key-logs as well," the advisory note said. "Users are not aware that every keystroke made while entering sensitive information - such as passphrases, passwords on local or remote systems - are captured by Conexant."
HP has said it is aware of the issue. "Our supplier partner developed software to test audio functionality prior to product launch and it should not have been included in the final shipped version. Fixes will be available shortly via HP.com," the company told Sky News.
HP shares closed at $19.26 on Thursday.
Editors' pick: Originally published May 12.
No comments:
Post a Comment