logitech unifying software marked as a virus

#Logitech unifying software marked as a virus update

Based on this information, I have decided to order a few Microsoft mice and test these devices to continue my research.

#Logitech unifying software marked as a virus update

However, from what I can determine, this security update is basically optional. Microsoft has issued a security update ( ) that checks to see if the communicated payload coming from the dongle is QWERTY and if the device TYPE is of a mouse, then the packet will be ignored.

I suspect this might be due to the fact that Logitech implements dongle firmware that can be updated, where as many of the mice already in the field use one-time programmable flash devices. I’m glad that I started with the vulnerable keyboard, as none of the mice in my possession could be injected, even though they’re clearly Logitech Unify receivers and had the orange star markings. This wireless (non-Bluetooth) attack scenario can be accomplished with a fairly inexpensive radio dongle, a tiny script, and from a distance of up to 100 meters away! The MouseJack exploit takes advantage of vulnerable dongles by allowing unencrypted keystrokes to be passed to the target computer’s operating system as legitimate packets. In particular, wireless devices using the Unifying receiver (depicted with the orange star) are particularly vulnerable.įrom my initial research, it appears that communication (keystrokes) from the wireless keyboard is encrypted to prevent eavesdropping and that mouse movements are usually sent unencrypted. This keyboard (Logitech K400r) is still available at my local Walmart for under $20. To my surprise, I was able to duplicate the attack on an inexpensive Logitech keyboard that I already had in my possession.

Following the work of the Bastille Research Group (See: ), I was interested in knowing if these (keyboard injection) vulnerabilities were still valid.