Cloud Keyloggers?
Summary: BitDefender discovered a continuing stream of new entries at pastebin.com and pastebin.ca containing text files formatted like keystroke-logging malware output, with each keypress preceded by the name of the program in focus on the victim's screen. BitDefender theorizes the variant's authors chose Pastebin because it is unlikely to be blocked by Web filters or malware blacklists, and Pastebin owner Jeroen said the site is working on a new version to block automated keyloggers, expected in a week or two, while removing reported pastes within 24 hours.
Why it matters: The stolen keystrokes are being published in the open on a free notepad service that Web filters and malware blacklists are unlikely to block, so the data exfiltration path runs through a site your controls probably trust.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026