[S3xySmurf]

So the Chinese keyboard developer MantisTek are shipping their GK2 keyboards with a built in keylogger.

All data is sent to the following IP: 47.90.52.88 and is being stored in /cms/json/putkeyusedata.php and /cms/json/putuserevent.php.

Sources:
https://www.reddit.com/r/MechanicalKeybo...g_data_to/
https://www.hackread.com/chinese-keyboar...keylogger/

[Bish0pQ]

I have heard about this, not really smart to buy your input device from a chinese company that isn't trusted. Still it's good that it's known now so they can close their business.

[S3xySmurf]

I have heard about this, not really smart to buy your input device from a chinese company that isn't trusted. Still it's good that it's known now so they can close their business.

Well to be honest anyone could really do something like this by buying a ton of cheap keyboards, modify them adding a hardware keylogger and re-distribute, probably make a little on each keyboard as well.

For example:
https://www.amazon.co.uk/RK100-Backlit-M...312&sr=1-3 ~ cheap keyboard (Probably could find even cheaper but this one would probably sell better)
http://www.keydemon.com/hardware_keylogger_module/ (A bit pricey for what it does, could probably make one using arduino board or something similar)

Although this would probably be used in a targetted attack rather than randomly selling the keyboards and you'd probably want remote access so hardware backdoor ?

[mothered]

Well to be honest anyone could really do something like this by buying a ton of cheap keyboards, modify them adding a hardware keylogger and re-distribute

This ^^^

And given this Is now publicly known, other companies and/or Individuals may follow suit.

[S3xySmurf]

Well to be honest anyone could really do something like this by buying a ton of cheap keyboards, modify them adding a hardware keylogger and re-distribute

This ^^^

And given this Is now publicly known, other companies and/or Individuals may follow suit.

This type of stuff happens every so often especially with hardware backdoors as we inherently trust hardware, I wouldn't be surprised if there's something in everyone's computer, laptop etc a shop near me was recently selling backdoored RAM sticks

[mothered]

This type of stuff happens every so often especially with hardware backdoors as we inherently trust hardware, I wouldn't be surprised if there's something in everyone's computer, laptop etc a shop near me was recently selling backdoored RAM sticks  

Goodness me, ram sticks backdoored. I've always (and still do) think along the same lines with backdoors.

For example, the native encryption to the Windows platform (where supported) being BitLocker. It serves It's purpose very well, but I wouldn't be surprised If Microsoft has In fact added a backdoor. As a safeguard, all my externals are encrypted with BitLocker and Inside that, sits an encrypted volume created with VeraCrypt (where all my data Is stored). BitLocker decrypts the device Itself, and VeraCrypt decrypts the volume where the data sits.

[S3xySmurf]

This type of stuff happens every so often especially with hardware backdoors as we inherently trust hardware, I wouldn't be surprised if there's something in everyone's computer, laptop etc a shop near me was recently selling backdoored RAM sticks  

Goodness me, ram sticks backdoored. I've always (and still do) think along the same lines with backdoors.

For example, the native encryption to the Windows platform (where supported) being BitLocker. It serves It's purpose very well, but I wouldn't be surprised If Microsoft has In fact added a backdoor. As a safeguard, all my externals are encrypted with BitLocker and Inside that, sits an encrypted volume created with VeraCrypt (where all my data Is stored).  BitLocker decrypts the device Itself, and VeraCrypt decrypts the volume where the data sits.

That's one of the reasons I use Linux with full disk encryption and dual boot Windows just for gaming purposes, amongst a few other things.