Internet Security Online

Q: I have heard about cyber thieves copying everything you type on the computer. Is this possible? How can I protect myself? — A.C., Philadelphia, Pa.

A: This type of criminal activity is called keylogging, and it is the next generation of cyber crime, even more insidious than phishing (the act of sending e-mails in an attempt to scam computer users into surrendering private information that can be used for identity theft).

With the use of keylogging programs, cyber crooks can surreptitiously copy the keystrokes of computer users in real time and transmit information back to themselves. To enter your computer, these programs typically exploit security flaws or they are hidden inside ordinary software downloads, e-mail attachments or files shared over peer-to-peer networks. Sometimes, these programs are even embedded in Web pages. For example: Keylogs may lay dormant until certain Web sites are visited, such as a banking site, or certain keywords require entry, like a Social Security number. These actions may trigger the program and ensure that the sensitive information is transmitted back to a thief’s Web page, server or a different piece of software, enabling the bad guys to sift through the material.

Different keylog programs exist. One sophisticated type is called a Trojan horse, which allows a perpetrator to essentially control your computer and server from a remote location. Screenshot loggers periodically capture screenshots of your desktop. Keylogs may also monitor e-mail, record chat and instant messages, in addition to logging keystrokes. Finally, some programs can capture both sides of chat conversations, or even turn on video and audio components without your knowledge and digitally record you and whatever else is in front of the computer screen.

Statistics indicate that keylogging is on the rise. For example, in 2005, computer experts witnessed 6,000 different types of keylogging variants, which represented a 65 percent increase over the previous year. In other words, at any given moment, almost 10 million computers are infected with some type of keylogging variant, putting as much as $24 billion in assets at risk.

The perpetrators of keystroke logging range from nosy bosses to suspicious spouses, knowledgeable hackers to sophisticated cyber criminals.

How can protect your computer and privacy from these cyber fiends?

First, always make sure you use a firewall, a good antivirus program and update your computer with the most current operating system patches.

Second, use major antivirus software that seeks out keylogging programs. Keystroke logging software is difficult to spot, because the applications use cryptic names and can send periodic logs of your keystrokes to anyone, anywhere. Such software will search and remove software keystroke loggers from your computer.

Third, immediately remove any suspect hardware from your computer. Hardware keystroke loggers look like small cylinders. They plug into the end of your keyboard’s cable and connect to your PC.

Not convinced about the necessity of protecting your computer? Think about this statistic: An unprotected computer has almost a 40 percent likelihood of being infected by some type of virus within 10 minutes of being connected to the Internet.

Submit your questions to pryingeyesbookyahoo.com.

This story appeared in The Daily Herald on page C10.