Learn

Wow, what a disaster computer. Hm, when you type, there seems to be a slight delay before some of the characters show up. What’s going on?

Oh no! It looks like your client may be in deeper trouble — they may have downloaded spyware as well. Spyware is malicious code downloaded without a user’s authorization which is used to steal sensitive information and relay it to an outside party in a way that harms the original user. If the spyware contained a keylogger, a threat actor could be recording everything your client types.

This means any sensitive data, like passwords, will soon be in the hands of a malicious third-party. While spyware usually isn’t used to alter data, it definitely violates the principle of confidentiality. A malicious actor may have been spying on sensitive data your client was typing.

Your Suggestion

  • Noticing a trend? Be careful what you click on and install that trustworthy antivirus already!

Instructions

Let’s run the app and test out your spyware!

  1. Type node app.js into the terminal and press the Enter or return key on your keyboard to start your keylogger app.

An image showing that "node app.js" has been typed into the terminal

  1. Press the circular arrow button on the right side of the screen to load the webpage. An image showing a cursor pressing the refresh button to refresh the iframe on the right side of the screen

  2. Now, try typing in a fake username and password. What prints to the terminal when you type in the password field?

Hint: Not working? Make sure you don’t have this exercise open in any other tabs! Then, refresh this page and try again.

Take this course for free

By signing up for Codecademy, you agree to Codecademy's Terms of Service & Privacy Policy.
Already have an account?