A keylogger that bypasses even SpyShelter

Well, for me it's simple.

Addon is a part of firefox process => Addon is able to read keystrokes.
It is a Javascript based keylogger => Browser provides API to share keystrokes with various extensions it means that it is Firefox, not SpyShelter's problem to care about.

Easy solution - use safe browser like chrome.

 

OR stick to trustworthy extensions on Firefox.

 

As said earlier, an add-on is part of your browser, so it piggy backs on the credentials of your browser in most security programs. Only way to block add-ons in IE and Chromium (Chrome) is to add a Group policy template, see pic

 

SpyShelter Stop-Logger Premium 8.9 and SpyShelter Firewall 2.9 updates:

- Added protection against browser extension keyloggers(Firefox) – SpyShelter Premium and Firewall only.
- Minor installer updates

nice

 

@ co22

That's Very good to hear ! Interestingly, a lot of people said it couldn't be done, including a regular vendor poster ?

I'd like to see it tested though against the 2 KL's recently mentioned in the other thread Then we'ld know for sure, one way or another

I can't as i already have Zemana installed. Speaking of which, if SS can do it, i hope they can.

 

ok
now installed SF 2.9 then restarted PC
run Firefox create new profile install nifty key logger 1.1 addon
but i still see log of key in kltext.txt
in xpsp3 maybe on win7 work
this is new so still need they work on it

 

How?

 

Well, right about time

Edit: I have received answer from SpyShelter Support concerning the XP issue

 

just install program it do itself

true,i now tested on windows 7 sp1
and it block that
C:\Program Files\Mozilla Firefox\firefox.exe,58,Blocked ;Recording keyboard input by Mozilla Firefox extension (C:\Program Files\Mozilla Firefox\firefox.exe(PID=272),keylogger/content/overlay.js)

 

By "how" I meant what did SpyShelter do to make their products can catch this type of logger? But I guess post#83 already answered that: keystroke encryption. Makes me think if KeyScrambler could give protection to this type of logger already.

 

Have you read this thread at all? Its up to the user to physically seek out this add on and install it. A "safer" browser will not cure an ignorant end user who cant read the addon description. Using Chrome over Firefox would net you the same end result.

 

His point was API access, but I don't know if Chrome allows it or not.

 

Sandboxie ftw

serious, AV is dead with new age malware and NSA.
Slackware linux is the way to go.

 

Have you read how those don't prevent this keylogger? AV wasn't even the topic.