AI-driven cyberattack can now steal your passwords with near 100 per cent accuracy, study warns

[Retro]

Even typing a secure password on a keyboard isn't safe with AI listening in.

Note that using 2FA will block this attack, however. Still, it's pretty bad if someone has your password, regardless.

Scientists have discovered a new AI-driven hacking method that guesses passwords with over 90 per cent accuracy by listening to what people type on their keyboard.

The cyberattack works by using AI to learn and recognise the sound profile of different keys on a keyboard, according to the yet-to-be peer-reviewed research, posted as a preprint in arXiv.

Using a smartphone-integrated microphone listening for keystrokes on an Apple MacBook Pro, researchers, including Joshua Harrison from Durham University in the UK, could reproduce the exact keys with 95 per cent accuracy.

AI-driven cyberattack can now steal your passwords with near 100 per cent accuracy, study warns

Study also recommends ways by which people can mitigate these kinds of attacks

uk.finance.yahoo.com

 

[aussiefooty]

you should have everything protected with internet security software.

I personally use Trend Micro and it does the job.

 

[Retro]

It wouldn't help against this, that's the point. Have another look at the description of how it works.

2FA will stop it, though.

 

[aussiefooty]

Every bit of internet software helps.
AI is more of a criminal move than anything else

 

[Retro]

It helps in a general sense, but does nothing against this though, that's the point.

 

[Mars]

It wouldn't help against this, that's the point. Have another look at the description of how it works.

2FA will stop it, though.

With AI now having 'ears', by taught to recognize key strokes, ordinary security will not help.
They should develop the kind of internet security that masks or alters the actual characteristic sound of each individual key stroke....so that Y sounds like X, or T, or whatever for example; and so on. Easier said then done, but not beyond the realm of possibility.
In the meantime I am using 2FA; a bit of a pain sometimes when you just want to get on with it, but hey, better safe then sorry, as grandma said....

 

[Mars]

Every bit of internet software helps.
AI is more of a criminal move than anything else

@Aussie. Unfortunately AI may yet turn to be quite a stealth weapon in the arsenal of cyber criminals.

 

[aussiefooty]

@Aussie. Unfortunately AI may yet turn to be quite a stealth weapon in the arsenal of cyber criminals.

That's the problem now. Any phone call you might be from someone that is mocking you or your children

 

[Mars]

That's the problem now. Any phone call you might be from someone that is mocking you or your children

I know, there is no escape.
We must weigh Risk vs Convenience. Whether we like it or not, every time we go online, there may be a risk attached. Nothing much we can do about it, except be vigilant, and enhance our online security as much as we can.
Even Norton themselves admit the following in their blurb: " No one can prevent all cybercrime or identity theft ".
At least they are honest, and spell it as it is.