HP Synaptics Touchpad Keylogger

Forum Moderators: open

Message Too Old, No Replies

HP Synaptics Touchpad Keylogger

engine

4:52 pm on Dec 11, 2017 (gmt 0)

I don't know if you missed this, but it seems there's another HP keylogger, following on from the issue in May, 2017. [webmasterworld.com]

A potential security vulnerability has been identified with certain versions of Synaptics touchpad drivers that impacts all Synaptics OEM partners. A party would need administrative privileges in order to take advantage of the vulnerability. Neither Synaptics nor HP has access to customer data as a result of this issue.

The new discovery affects hundreds of HP devices, and the company says it has issued a fix.

Full details are in the security bulletin. [support.hp.com...]

lammert

5:16 pm on Dec 11, 2017 (gmt 0)

Thanks for the heads up. My laptop was on the list of affected devices. The download size of the softpaq with the fix is "just" 154 MB.

keyplyr

6:21 am on Dec 12, 2017 (gmt 0)

Just reading about it...

Researcher Michael Myng found a deactivated keylogger in a piece of software found on over 460 HP laptop models. A full list of affected laptops is here [support.hp.com] The keylogger is deactivated by default but could represent a privacy concern if an attacker has physical access to the computer.

[techcrunch.com...]