Attackers Can Remotely Hack Wireless Keyboards, Mice

[Ban Hammer 13,333]

Posted: Feb. 25th, 2016

Researchers discovered that billions of wireless keyboards and mice are vulnerable to hacks through a $15 piece of equipment.

The remote cyberattack against wireless keyboards and mice, so-called MouseJack by the researchers, could lead to complete computer takeovers, according to reports. The hackers would reportedly need a $15 piece of equipment or dongle and 15 lines of Python code to remotely hack these devices from up to 590 feet away.

The researchers claim these devices are vulnerable to “remote exploitation via radio frequencies” through problems in the protocols or communications between the wireless devices and USB wireless dongles. The communications are unencrypted leaving the devices vulnerable to interception or hijacking by malicious actors, according to reports. The hackers may reportedly perform a keystroke injection to spoof a mouse, spoof a keyboard or conduct a forced pairing.

The researchers say attackers could use the $15 dongle to pair and take over the victim’s dongle to act as a mouse, utilizing that take over to access the keyboard and obtain control over the victim’s computer or network. The entire hijacking process can happen within seconds, according to the researchers.

“Don’t think of an attacker needing to use your keyboard/ mouse for minutes looking through your interesting emails. In around ten seconds, your computer can be altered to allow an attacker to remotely download documents, all your emails, and add or delete programs,” one researcher wrote in a post.

Since the vulnerability and attack method are at the keyboard level, the researchers claim that all computers, including Macs, Linux and other wireless dongles could be targeted by MouseJack. “We can compromise an airgapped network, going in through a different frequency protocol, directly to the USB port,” the researcher said in a post.

The manufacturers for these devices have been notified of the existing vulnerability; however, many of the mice are not able to be patched or updated, according to reports. The researchers warn that the method of attack could have serious implications, and could be used by nation-state hacking collectives to launch themselves into a network.

http://www.batblue.com/attackers-can-remotely-hack-wireless-keyboards-mice/

[Dakine10 5,452]

Ban dongles!

[smilesammich 10,727]

great now i have to resist the urge to shout out "TAKE OVER THE VICTIMS DONGLE" all day. thanks charles.

[Darnell 8,478]

all my gear is wired.

[Ban Hammer 13,333]

great now i have to resist the urge to shout out "TAKE OVER THE VICTIMS DONGLE" all day. thanks charles.

isn't that the battle cry of all caba women?

[smilesammich 10,727]

isn't that the battle cry of all caba women?

what? there's no crying in battle. pfft.

[X Factor 1,112]

Scary

[TBoneTX 45,267]

Since the vulnerability and attack method are at the keyboard level, the researchers claim that all computers, including Macs, Linux and other wireless dongles could be targeted

Therefore, all users of VJ should immediately abandon using PCs and instead use handphones (right, Bro D?).

[Ban Hammer 13,333]

Therefore, all users of VJ should immediately abandon using PCs and instead use handphones (right, Bro D?).

or just use keyboards and mice with cords

[ExPatty 502]

You had me at dongle.

[Dakine10 5,452]

The manufacturers for these devices have been notified of the existing vulnerability; however, many of the mice are not able to be patched or updated, according to reports. The researchers warn that the method of attack could have serious implications, and could be used by nation-state hacking collectives to launch themselves into a network.

http://www.batblue.com/attackers-can-remotely-hack-wireless-keyboards-mice/

Logitech released a firmware fix for their unifying receiver.

http://forums.logitech.com/t5/Mice-and-Pointing-Devices/Logitech-Response-to-Unifying-Receiver-Research-Findings/m-p/1493878/thread-id/73186

I'm curious how they could get this to work from 500' away though. I can't even get the actual mouse to work when I get more than 3 feet away from the receiver.

[Dakine10 5,452]

List of affected devices

https://www.bastille.net/affected-devices

[Teddy B 17,252]

Logitech released a firmware fix for their unifying receiver.

http://forums.logitech.com/t5/Mice-and-Pointing-Devices/Logitech-Response-to-Unifying-Receiver-Research-Findings/m-p/1493878/thread-id/73186

I'm curious how they could get this to work from 500' away though. I can't even get the actual mouse to work when I get more than 3 feet away from the receiver.

That's cause your dongle is too small.

[smilesammich 10,727]

oooooo dongle burn!

[Dakine10 5,452]

That's cause your dongle is too small.

I had a bigger one a few years back, but it used to stick out too far and eventually it got broken off.