Researchers have a keylogger made for an onscreen keyboard on an Android smartphone. The keylogger works via the motion sensor, but it is still not accurate enough to keystrokes just to register.
The researchers from the university of California have as a goal limited to the protection of data from motion sensors, to denounce, they write in their paper. According to the researchers, the data from motion sensors can easily be used to make users ‘listening’. Therefore that data in mobile operating systems more secure, they say.
To the lack of security, they wrote the Android app Touchlogger, a numeric keypad in landscape mode the user input, attempt to determine by means of the motion sensor. On the sample unit, a HTC Evo 4G, the app in about 70 percent of the cases, with the right input on the basis of the data of the motion sensor. That could be determined, because people at the press of a button on a screen only to exert pressure, making the device moves. These movements can be correlated to the numbers that were entered. The technology could be on tablets by the larger screen, hence, better work, say the researchers at The Registry, because the movements are larger.
The keylogger is still no danger for Android users: it is not possible to use the motion input on qwerty keyboards to log in: for this is the method to little exactly. According to the researchers, it is possible that attackers in the future technology to refine, for example, passwords and bank account information of smartphone users to log in. That would be on both Android and iOS can, they think.
