• Overview
    • Scam Map
    • Kill Chain
Recents

    Conversations will appear here

Technique

Keylogger

Also known as: Keystroke Logger, Keyboard Logger, Input Capture, Keystroke Capture, System Monitor

EXPLOITATIONMITRE ATT&CK: Input Capture: Keylogging technique (T1056.001)

Software or hardware that secretly records every keystroke on a device, capturing passwords, messages, credit card numbers, and other sensitive input before encryption protects it.

Common attack flows

How it fits in a scam

This technique shows up duringEXPLOITATION

Before

  • Phishing EmailDELIVERY
  • SmishingDELIVERY
  • MalvertisingDELIVERY
  • Poisoned SoftwareDELIVERY
  • +3 more

After

  • Credential TheftCOMPROMISE

Defense

How to defend against this

How to spot it

  • Noticeable delay between typing and characters appearing on screen
  • Cursor or mouse movements lagging
  • Unknown processes running in Task Manager or Activity Monitor
  • Antivirus alerts for keylogger or spyware signatures
  • Accounts compromised despite using unique passwords
  • Slow web browsing performance
  • Unfamiliar browser extensions or startup programs
  • Hardware device attached between keyboard and computer

Tools you can use

  • Software UpdatesCost low · Effect high
  • Antivirus SoftwareCost low · Effect medium

Further reading

  • Malwarebytes

    Keylogger detection and protection

  • MITRE ATT&CK

    Input Capture: Keylogging technique (T1056.001)

Related techniques

Variants

  • Malware

Same stage

  • Account Takeover
  • Authorized Push Payment Fraud
  • Synthetic Identity Creation
  • Doxing
  • Swatting
  • +6 more

Similar defense

  • Remote Access Tool
  • Clipboard Hijacking
  • Malicious App Installation
  • Tech Support Scam
  • Supply Chain Compromise
  • +8 more