A new threat to businesses has emerged from an unlikely quarter: peripheral devices. Researchers have warned that so-called JitterBugs could be implanted in a keyboard or mouse, which would then covertly transmit user keystrokes.
The name comes from the method the devices use to transmit the stolendata in “jittery” chunks by adding a tiny processing delay after akeystroke.
A US graduate student, Gaurav Shah, built a version using simplecomponents.
“This is spy stuff,” Shah told reporters. “Someone would need physicalaccess to your keyboard to place a JitterBug device, but it could bequite easy to hide such a bug in plain sight among cables, or replace akeyboard with a bugged version.”
“Although we do not have evidence that anyone has actually been usingJitterBugs, our message is that if we were able to build one, so couldother, less scrupulous people,” he added.