Did you know that stealing personal details from websites – using keyloggers – is easier on iOS than Android?
Our latest research around the topic was inspired while we’ve been preparing web telemetry, detecting bots and anomalies in your website traffic.
Keyloggers are software or devices registering each keystroke and sending to a 3rd party. It can be conversation, logins and passwords, credit card details.
While Android makes it difficult to recognise which key has been pressed, iOS and desktop browsers have no problem sharing this data with any script. It creates major security gap that can be exploited by scripts on websites, plugins like analytics or even browser extension.
Yes, all browser extensions can have access to everything you type and do in your browser.
The article we sharing is a short compilation of our research around the topic. More will follow while we audit specific websites.
We will try to reach Apple suggesting policy change for javascript events listeners and will share with you if the situation develops.
If you have security of your browser in mind but also want to monitor your servers, sign in on our waiting list for free services while we develop our technology. https://a-irene.com/
