Implementation and Analysis of USB based Password Stealer using PowerShell in Google Chrome and Mozilla Firefox

Muslim, Abdul Azies; Budiono, Avon; Almaarif, Ahmad

doi:10.1109/ic2ie50715.2020.9274566

Cited by 2 publications

(1 citation statement)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The vast majority of researchers who researched keystroke-injection-hardware-based solutions used microcontrollers [15,[24][25][26][27]. In addition to microcontrollers, some research used more powerful small-factor computers that offer additional capabilities [14,28].…”

Section: Usb Attacksmentioning

confidence: 99%

A Deep-Learning-Based Approach to Keystroke-Injection Payload Generation

Gurčinas,

Dautartas,

Janulevičius

et al. 2023

Electronics

View full text Add to dashboard Cite

Investigation and detection of cybercrimes has been in the spotlight of cybersecurity research for as long as the topic has existed. Modern methods are required to keep up with the pace of the technology and toolset used to facilitate these crimes. Keystroke-injection attacks have been an issue due to the limitations of hardware and software up until recently. This paper presents comprehensive research on keystroke-injection payload generation that proposes the use of deep learning to bypass the security of keystroke-based authentication systems focusing on both fixed-text and free-text scenarios. In addition, it specifies the potential risks associated with keystroke-injection attacks. To ensure the legitimacy of the investigation, a model is proposed and implemented within this context. The results of the implemented implant model inside the keyboard indicate that deep learning can significantly improve the accuracy of keystroke dynamics recognition as well as help to generate effective payload from a locally collected dataset. The results demonstrate favorable accuracy rates, with reported performance of 93–96% for fixed-text scenarios and 75–92% for free-text. Accuracy across different text scenarios was achieved using a small dataset collected with the proposed implant model. This dataset enabled the generation of synthetic keystrokes directly within a low-computation-power device. This approach offers efficient and almost real-time keystroke replication. The results obtained show that the proposed model is sufficient not only to bypass the fixed-text keystroke dynamics system, but also to remotely control the victim’s device at the appropriate time. However, such a method poses high security risks when deploying adaptive keystroke injection with impersonated payload in real-world scenarios.

show abstract