If yous are a gamer, yous tin relate to the higher upwards quote.
But what if your winning weapon betrays you?
The pop 104-key Mantistek GK2 Mechanical Gaming Keyboard that costs roughly €49.66 has allegedly been caught silently recording everything yous type on your keyboard in addition to sending them to a server maintained past times the Alibaba Group.
This built-in keylogger inward Mantistek GK2 Mechanical Gaming Keyboard was noticed past times a few owners who headed on to an online forum to part this issue.
According to Tom's Hardware, MantisTek keyboards utilise 'Cloud Driver' software, perchance for collecting analytic information, but has been caught sending sensitive information to servers tied to Alibaba.
After analysing to a greater extent than closely, Tom's Hardware squad flora that Mantistek keyboard does non include a full-fledged keylogger. Instead, it captures how many times a primal has been pressed in addition to sending this information dorsum to online servers.
The affected users likewise provided a screenshot showing how all your plain-text keystrokes collected past times the keyboard are beingness uploaded to a Chinese server located at IP address: 47.90.52.88.
However, fifty-fifty if there's no malicious intent, capturing in addition to uploading keystroke counts without users' consent violates trust in addition to puts systems' safety at adventure past times leaking sensitive information.
Since Alibaba Group likewise sells cloud services similar Google in addition to Amazon, this collected information is non necessarily beingness sent to the Alibaba itself, but soul who is using its cloud service.
Opening the IP address inward query straight into a spider web browser in addition to on a Chinese login page, which translates to "Cloud mouse platform background administration system" in addition to is maintained past times Shenzhen Cytec Technology Co., Ltd.
Reportedly, the MantisTek keyboard's software sends the collected information to ii destinations at that IP address:
- /cms/json/putkeyusedata.php
- /cms/json/putuserevent.php
If yous cannot preclude yourself from using the keyboard, but desire to halt it from sending your primal presses to the Alibaba server, merely brand certain the MantisTek Cloud Driver software is non running inward the background, in addition to block the CMS.exe executable inward your firewall.
To block the CMS.exe executable, add together a novel firewall dominion for the MantisTek Cloud Driver inward the "Windows Defender Firewall With Advanced Security."
