MantisTek GK2 Keyboard Sends Data to China
ID: 38925a17-3e81-527e-9a32-7db4d66bbd3f
STIX ID: report--38925a17-3e81-527e-9a32-7db4d66bbd3f
Feed Name: Binary Defense Blog
Threat Score
Reports indicate Mantistek GK2 keyboards' Cloud Driver software is functioning as a keylogger, sending recorded keystrokes to servers associated with Alibaba; users and Tom's Hardware observed the behavior. Recommended actions include stopping use of the keyboard, ensuring the cloud driver is not running, and blocking the CMS.exe executable to prevent further data exfiltration.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.