MouseJack
·109 words·1 min·
0
Table of Contents
Bastille's Research Page
Overview #
MouseJack is a set of vulnerabilities found by Bastille Research in 2016. Many wireless mouse and keyboard dongles did not check that the data they received was genuine. An attacker with a cheap radio could pair a fake device with the dongle and inject keystrokes into the computer, from up to about 100 metres away.
Affected devices came from several manufacturers. The Bastille page lists the affected devices and mitigation advice.
Why it matters #
The dongle is a trusted input device, so the computer accepts its keystrokes without question. This makes the attack a good example of why wireless input devices need authentication.