Your Computer's Stealth Identity Thief

July 18, 2005 — -- Next time you're online, it might be worthwhile to consider the dangers of aimless surfing. Every time you visit a Web site or open an attachment in your e-mail, you could be downloading a spy into your computer.

The "spy" is known as a keylogger -- an invisible software program that identity thieves can use to track your online activity. And even if you're careful, it's probably impossible to detect if a keylogger is recording information like your credit card number or bank account password.

"You won't know it's there, you won't see your machine slow down, you won't see anything unusual," said Vincent Weafer, director of security with the digital security firm Symantec. "It can just silently watch every keystroke you type in… as if they're standing over your shoulder.

At least a third of online crimes can now be traced to keylogging. Part of the reason for this is that the programs are legal to obtain and the crime is relatively easy to commit. Typing "keylogger" into a simple Internet search engine returns multiple programs that are perfectly legal to buy and install.

Many parents use keylogging technology to check up on the Web sites children are visiting, and some businesses use it to monitor employee activity. But in the hands of a hacker looking to steal your financial information, keyloggers are very dangerous.

And as more Americans turn home computers into personal banking and bill-paying centers, the chances for identity theft grow by the day.

"It is a problem that is growing exponentially, and it's growing exponentially because more and more people are keeping larger and larger amounts of data on their computers," said Joseph DeMarco, an assistant U.S. attorney in the computer crimes division.

Attackers who use keylogging operate much the same as other identity thieves. They often sell the information to third parties who will use whatever account or personal information they can get to run up credit card purchases or funnel money out of bank accounts.