Hacking the Belkin E Series Omni View 2-Port KVM Switch
Summary: Cisco Talos researchers demonstrated that a Belkin E Series OmniView 2-Port KVM switch, a low-cost SoHo unit available on eBay for under £10, can be modified with an Arduino Uno and off-the-shelf components to act as a hardware keylogger. The team found the PIC16C57C's code protection bits were enabled so firmware could not be read, but determined that piggy-backing a secondary microcontroller on the PS/2 bus is feasible, with logged keystrokes exfiltrated as hex data typed into a text editor on the connected host.
Bottom line: The attack requires only brief in-situ access to a device that sits between a keyboard and critical systems, and the exfiltrated data arrives as ordinary keystrokes that no network or software control would flag. If a sub-£10 peripheral can be turned into a keylogger with a minimum of electronics knowledge, the inventory of hardware allowed to touch critical systems becomes a security control in its own right.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026