Keylogger

Software or hardware that secretly records keystrokes on a device, allowing an attacker to capture passwords, messages, credit card numbers and other typed information.

Software keyloggers are usually installed as part of malware, often arriving through a phishing attachment or a malicious download. They run quietly in the background and send captured keystrokes, and sometimes screenshots, to the attacker. Hardware keyloggers are small physical devices plugged in between a keyboard and computer, which requires physical access but can be very hard to notice.

A keylogger on a computer used for online banking, payroll or administrator work can give an attacker everything needed to take over accounts and move money. Because the victim types their real password, the resulting logins look legitimate. Shared or public computers, such as those in hotel business centres, carry a higher risk.

Practical tip: use multi-factor authentication, especially methods like authenticator app prompts or security keys, so a captured password alone is not enough. Keep endpoint protection active and up to date, avoid entering business credentials on public computers, and occasionally check the back of shared office computers for unfamiliar devices plugged into USB ports.