Hidden software that can record every letter typed on a computer keyboard has been discovered pre-installed on hundreds of HP laptop models.
Security researcher Michael Myng found HP had a keylogger in the keyboard driver. The keylogger saved scan codes to a WPP trace. The logging was disabled by default but could be enabled by setting a registry value (UAC required).
Myng discovered the keylogger while inspecting Synaptics Touchpad software, to figure out how to control the keyboard backlight on an HP laptop.
HP said more than 460 models of laptop were affected by the “potential security vulnerability”. It has issued a software patch for its customers to remove the keylogger.
HP has issued a full list of affected devices, dating back to 2012 and has provided patch for removal.