Save guest from Keylogger malware

Another malware that has come to the rescue of ESET is Keylogger malware that steals banking and email passwords of guests staying at hotel. ESET has alerted hotel business centers on malware. Cyber criminals install keylogger malware on the computer and steal large amount of information including other guests personally identifiable information (PII), log in credentials to bank, retirement and personal webmail accounts, as well as other sensitive data in the business center’s computers.

According to help Net Security, the department of homeland security and national cyber security and communications integration center issued an advisory to hotel companies warning that criminal groups may be targeting hotel business centers with keylogger malware.

Despite describing the attacks as not sophisticated, the attackers’ keylogger malware had a high impact. Here are few tips to stay safe from keylogger malware:

The advisory included steps for hotel chains to secure PCs in their business centers-including limiting guests to non-administrator accounts without the ability to install programs.

Help net security points out that much modern malware can install regardless of whether a user has administrator privileges and advises hotel guests to refrain from entering sensitive information such as banking passwords whilst on PCs in hotel business centers.

Krebs points out that the fact that hotel business centers routinely allow users to plug in USB devices and CDs means that attackers can bypass many security measures.

Security affairs offers a detailed list of the NCCICs recommendations for hotel chains but concludes that the simplest solution is to avoid using any public computer for private affairs such as banking.