Wow, what a disaster computer. Hm, when you type, there seems to be a slight delay before some of the characters show up. What’s going on?
Oh no! It looks like your client may be in deeper trouble — they may have downloaded spyware as well. Spyware is malicious code downloaded without a user’s authorization which is used to steal sensitive information and relay it to an outside party in a way that harms the original user. If the spyware contained a keylogger, a threat actor could be recording everything your client types.
This means any sensitive data, like passwords, will soon be in the hands of a malicious third-party. While spyware usually isn’t used to alter data, it definitely violates the principle of confidentiality. A malicious actor may have been spying on sensitive data your client was typing.
- Noticing a trend? Be careful what you click on and install that trustworthy antivirus already!
Let’s run the app and test out your spyware!
node app.jsinto the terminal and press the Enter or return key on your keyboard to start your keylogger app.
Press the circular arrow button on the right side of the screen to load the webpage.
Now, try typing in a fake username and password. What prints to the terminal when you type in the password field?
Hint: Not working? Make sure you don’t have this exercise open in any other tabs! Then, refresh this page and try again.