Keylogger bug in Corsair K100 keyboard firmware

Corsair has responded to issues with the Corsair K100 gaming keyboards that many users have seen as evidence of a built-in keylogger that saves user-entered keystrokes. The essence of the problem is that users of this keyboard model were faced with a situation where, at unpredictable times, the keyboard re-issued sequences that had been previously entered. At the same time, the text was re-typed automatically after a few days or weeks, and sometimes quite long sequences were issued, the output of which could only be stopped by turning off the keyboard.

Initially, it was assumed that the problem was caused by the presence of malware on users' systems, but later it was shown that the effect is specific to owners of the Corsair K100 keyboard and manifests itself in testing environments created to analyze the problem. When it became clear that the problem was in the hardware, Corsair representatives suggested that it was not caused by the hidden collection of user input data and not by the built-in keylogger, but by an error in the implementation of the standard macro recording function present in the firmware.

It is assumed that due to an error, at arbitrary moments, the recording of macros was activated, which after some time were played back. In favor of the hypothesis that the problem is related to recording macros, the fact that the output does not just repeat the entered text, but pauses between presses are observed and operations such as pressing the Backspace key are repeated. What exactly initiated the recording and playback of macros is not yet clear, since the analysis of the problem has not yet been fully completed.

Source: opennet.ru

Add a comment