• NewNewAugustEast@lemmy.zip
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    5 hours ago

    I didn’t watch the video, but maybe they said how this done.

    If it installed silently, it must be getting pulled in via Windows update right? Where Microsoft just sees this a regular old driver for a device I would imagine?

    I have an LG monitor, maybe about 5 years or older. But I don’t have windows so I assume it knows nothing.

    EDIT: Nevermind. I went and watched the section at the beginning, and yep that is exactly how it is done. Does windows not even vet what a vendor hands them as a driver? Perhaps they don’t care, but this seems like an easily exploitable route.

    • floofloof@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      ·
      37 minutes ago

      I suspect the thoroughness of the vetting is inversely proportional to the size of the kickback to Microsoft.

      • NewNewAugustEast@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        19 minutes ago

        Got me curious. Quick search and I found three windows drivers that had keyloggers hidden in them. Go figure it was HP!

        • HP Notebook Keyboard Drivers: Keylogging code was discovered in the SynTP.sys file, which was part of the Synaptics Touchpad driver shipped with certain HP notebook models.

        • HP Audio Drivers: Researchers found keylogging features within the Conexant HD Audio Driver (specifically version 1.0.0.46 and earlier) used in various HP laptops and other Windows systems.