Project 3-4: Use a Software Keylogger

Project 3-4: Use a Software Keylogger

Time Required: 25 minutes

Objective: Given a scenario, analyze potential indicators to determine the type of attack.

Description: A keylogger program captures everything that a user enters on a computer keyboard. In this project, you download and use a software keylogger.

1. Open your web browser and enter the URL refog.com (if you are no longer able to access the program through the URL, use a search engine to search for “Refog Keylogger”).
2. Click Features to see the features of the product.
3. Click Home.
4. Click Download.
5. Click Create an account and enter the requested information.
6. Click Download.
7. When the file finishes downloading, run the installation program. Note that you may have to enter the password on the previous page to extract the files.
8. When prompted with I’m going to use this software to monitor: select My own computer.
9. Click Hide program icon from Windows tray. Click Next.
10. Click I Agree.
11. Click Select All and then Next.
12. login and password for the online dashboard. Click Activate.
13. You will receive a message that the subscription has expired. Click Yes to install in offline mode.
14. Click Install.
15. Click Restart Now.
16. After the computer has restarted, use the keystroke combination CtrI + Alt + Shift + K to launch Refog Keylogger.
17. Click Tools and then click Settings.
18. Note the default settings regarding what is captured.
19. Click Back to log.
20. Minimize Refog Keylogger.
21. Use your computer normally by opening a web browser to surf to a website. Open Microsoft Word and type several sentences. Open and close several programs on the computer.
22. Maximize Keylogger and note the information that was captured.
23. In the left pane, click through the different items that were captured.
24. Under Settings, click Websites Visited.
25. Under Websites Visited, click Make website screenshots.
26. Click Apply
27. Open a web browser and surf to multiple websites.
28. Under Users, click Websites visited. Note the screen captures of the different sites.
29. What type of information would a software keylogger provide to a threat actor? How could it be used against the victim?
30. Click File and then Exit to close Keylogger.
31. You may uninstall Keylogger if you wish.
32. Close all windows.