Wireless keyboards connect to a device via Bluetooth. Most require a USB dongle in order for the keyboard to be recognized by the device. Early brands of this technology often had security gaps that could allow a hacker within close proximity to eavesdrop on the data stream and obtain sensitive information. Although wireless keyboards use encryption for sending information back to the devices they are paired with, sometimes that encryption is not well executed. This lack of security can lead to the attacker injecting packets into the unencrypted communication.
Some common security hacks involving Bluetooth connections:
- Bluejacking is when an individual scans for Bluetooth devices within a certain radius and then sends anonymous messages to the victim.
- Bluesnarfing involves the theft of information from a device through a Bluetooth connection
- Bluebugging is the by far the most dangerous of Bluetooth attacks. This type of attack allows the hacker to take full control of the victim’s device.
- MouseJack relies on these methods for compromising the adapter, injecting keystrokes as a spoofed mouse or keyboard or forcing the pairing of an illegitimate mouse or keyboard.
Attackers need to be within a certain radius of your Bluetooth device in order to perform any of these attacks. Bluetooth connections have a radius of approximately 30 feet. The attacks mentioned above normally involve a Bluetooth-enabled device such as a smart phone, tablet or laptop. But have you ever considered the security of a wireless keyboard, mouse, access points, routers, or IoT devices? Older wireless devices can have vulnerabilities that were never addressed or lack the ability to update.
The wireless keyboard could become a keylogger for an intruding crook. Or by using a wireless mouse and then enabling the onscreen keyboard to further the attack. Not only can you be susceptible to having sensitive information stolen, you may also be subjected to a virus infection.
If this is a concern for you, it would be important to use a wired keyboard and mouse. It is equally important to have a level of situational awareness.
Resources
Your Wireless Keyboard Isn’t Safe (Even with AES Encryption)