HP issues fix for keylogger found pre-installed on several laptop models

A number of HP laptops come with a nasty accidental hidden "feature", in the form of a keylogger which records the user's typed input - although the issue has now been patched by the company.

So, what is the cause of the problem?

Modzero believes that there "is no evidence that this keylogger has been intentionally implemented", adding that "it is [obviously] a negligence of the developers".

"Users are not aware that every keystroke made while entering sensitive information - such as passphrases (or) passwords on local or remote systems - are captured by (the software)", the security advisory continued.

The driver, which was developed by audio chip manufacturer Conexant, is preloaded on over two dozen models of HP laptops, including the HP Elitebook, HP ProBook, and HP ZBook.

The keylogger is used by audio drivers to determine when the up and down volume control buttons have been pressed.

HC judge Karnan gives cops the slip
CJI Khehar asked Nedumpara where is Justice Karnan, to which the bench was informed that he was "very much in Chennai ". Karnan, to ratchet up the fight, passed an order directing the examinations of all these seven judges instead.

Hundreds of Sudanese protest in solidarity with Palestinian prisoners
The image released by Israel shows Barghouti allegedly sneaking food in the toilet area of his cell. The post was taken down from their Hebrew Facebook page.

Hat-Trick Hero Ronaldo Comments On Madrid Derby Show
Atletico are very strong, they are not in the semi-finals by chance, and we must keep our concentration next Wednesday". In La Liga we did well, but [Atletico keeper Jan] Oblak made a lot of saves, and today the ball went in.

"Investigators with access to the unencrypted file-system might be able to recover sensitive data of historic key logs as well", Modzero said.

The log file-located at C:\Users\Public\MicTray.log-is overwritten after each computer reboot, but there are several ways that the contents could survive for weeks, or even indefinitely. A list of affected products can be found here. Doing so, however, may disable special key function but that's a fair trade-off IMO. If you find this log file existing in your C drive, then please have it deleted immediately, says the firm.

Regardless, Modzero is advising that everyone who owns a HP computer should be on guard, and check whether C:\Windows\System32\MicTray64.exe or C:\Windows\System32\MicTray.exe is installed.

HP shares closed at $19.26 on Thursday. In other cases, the keystrokes will be passed to a Microsoft Windows debugging interface on the PC, and expose them to possible capture, Modzero said.

Specifically, the keylogger itself is embedded in a device driver called MicTray64.exe and uses a debugging feature to capture all information a user types, including passwords and user logins.

What makes this worse is that business laptops are mainly affected, and these devices are built around security - because obviously an organisation's corporate data is a very precious resource.


Popular
  • Google announces Project Treble to allow OEMs to deliver faster Android updates

    Google announces Project Treble to allow OEMs to deliver faster Android updates

    They then pass the edited code to device makers, who incorporate the new software, making changes as needed. However, the Project Treble architecture is now running on Pixel phones using the O Developer Preview.
    Blackburn's decline from Premier League champions to League One

    Blackburn's decline from Premier League champions to League One

    The striker scored a penalty two minutes before half-time before Chris Cohen fired in a second from distance after the break. Victories for Nottingham Forest and Birmingham condemned Rovers to relegation.
    Kapil Mishra, Sacked From Arvind Kejriwal Cabinet, Alleges Conspiracy: 10 Points

    Kapil Mishra, Sacked From Arvind Kejriwal Cabinet, Alleges Conspiracy: 10 Points

    He added that two persons have been included in the Cabinet now, Kailash Gahlot and Rajendra Gautam for a post which was vacant. Reacting to the development, Delhi BJP chief Manoj Tiwari said the corruption circus of the Kejriwal government stood "exposed".
  • OSU Sports Score High With APR

    OSU Sports Score High With APR

    Idaho was given a bowl ban for the 2014 season, but it was lifted in March 2015 because the team had shown academic progress. Of 351 Division 1 basketball programs , Michigan State is one of only 20 to earn a flawless multi-year April score of 1000.

    Obama warned Trump about Flynn, former officials say

    Mr Flynn was dismissed as defence intelligence chief by the Obama administration before he became became a Trump supporter. Flynn, a retired Army lieutenant general, was Obama's Defense Intelligence Agency director until he was sacked in 2014.

    Preds reach 1st Western final in team history, ousting Blues

    Sekera did not return, leaving the Oilers with only four defencemen for part of the second when Kris Russell was also shaken up. We feel we have a capable group that can go out and have success ". "So I would say they had a positive impact on the game".
  • Reliance Jio is rolling out JioFiber 'Preview offer' in these places

    Reliance Jio is rolling out JioFiber 'Preview offer' in these places

    Regarding this, Jio tweeted the latest details from its official customer support handle JioCare, in response to a query. In October 2016, Reliance Jio came in existence and since then it has catered the huge market of Telecom sector.

    DOJ press conference for Alton Sterling investigation set for 1 p.m.

    Edwards said, "It is now up to the Louisiana Department of Justice.to determine whether any state charges will be brought". The two officers were called to a convenience store on July 7, 2016, after receiving reports of a man with a gun outside.
    Nigeria presidency releases names of freed Chibok girls

    Nigeria presidency releases names of freed Chibok girls

    Its insurgency has killed more than 20,000 people and driven 2.6 million from their homes, with millions facing starvation. Nigerian President Muhammadu Buhar has expressed joy at meeting the 82 girls, as he shared photos of them on social media.
  • MP: girls outshine boys in std 12th, 10th state board exams

    MP: girls outshine boys in std 12th, 10th state board exams

    To know the score open the official website of the board and click on the relevant link where details about result will be asked. The MP Board Result is now available to the students online on mpresults .nic.in and mp10.jagranjosh.com / mp12.jagranjosh.com.

    FCC Chairman Frames His Plan For Internet As Boon For Privacy

    Today, Ajit Pai , the new Trump-appointed head of the FCC, outlined his plan to rid numerous Obama-era net neutrality rules. The Republican argues the regulations have cost jobs and have kept lower-income and rural areas behind the times.

    Kerala SSLC Result 2017 Grades - Check Kerala Pareeksha Bhavan SSLC 10th Result

    The results will be available in all high schools and higher secondary schools as they are equipped with broadband facility. The state government has conducted the Class 10th Board Examination as successfully from 8th March to 23rd March 2017.

CONNECT