KeySweeper, a USB charger that sniffs, decrypts, logs, and transmits keystrokes of some Microsoft wireless keyboards can be built for $10
KeySweeper is a stealthy Arduino-based device … Emil Protalinski / VentureBeat : This USB wall charger secretly logs keystrokes from Microsoft wireless keyboards nearby Dennis Fisher / Threatpost : How a $10 USB Charger Can Record Your Keystrokes Over the Air Christopher White / Neowin : Beware of James Bond-like device that can log keystrokes from keyboards Matthew Sparkes / Telegraph : The £6 box which spies on everything you type JC Torres / SlashGear : Arduino-based KeySweeper charger sniffs MS wireless keyboards Rob Price / Business Insider : Hackers Can Use A $10 Wall Charger To Intercept Anything Typed On Wireless Microsoft Keyboards Ms. Smith / Network World : Hacker builds wireless Microsoft keyboard keylogger disguised as USB wall charger Bruce Schneier / Schneier on Security : Keystroke Logger Disguised as a USB Charger Greg Kumparak / TechCrunch : This Fake Phone Charger Is Actually Recording Every Key You Type
Context & Ripple Effects
KeySweeper lands mid-arc in a string of demonstrations that cheap, off-the-shelf hardware can pull secrets out of the air around ordinary devices: months later researchers showed a sub-$300 rig could steal laptop crypto keys from processor radio leakage, and a year on, testing found popular wireless keyboards from HP, Toshiba, and GE shipped with no encryption at all — worse off than the Microsoft boards KeySweeper targets.
What makes this entry notable is cost and camouflage: an Arduino-based USB wall charger that looks like infrastructure, not an attack tool, decrypting what its target vendor assumed was protected traffic.
First-order effects
- Owners of Microsoft wireless keyboards face immediate exposure to a passive attacker: any nearby charger can log their keystrokes without visible trace.
- Defenders gain a working reference design — because the $10 build is documented, IT teams must now treat wall chargers in offices and hotels as untrusted hardware.
Second-order effects
- Peripheral vendors are pushed toward mandatory link encryption: the subsequent finding that HP, Toshiba, and GE keyboards transmit unencrypted shows how wide the gap behind Microsoft's weak protection remained.
- Chargers join implanted chips in enterprise IT equipment as a supply-chain inspection problem, forcing buyers to vet power accessories the way they vet network gear.
Third-order effects
- If the pattern holds across the corpus — hidden chips in replacement phone screens logging keystrokes, LED side channels leaking smart-card keys, $11K rigs cloning YubiKeys — physical proximity becomes a standing attack surface, and security certification for peripherals shifts from software audits to radio-emission and hardware-integrity testing.
- The economics favor attackers: as demonstrated costs fall from thousands of dollars to roughly ten, organizations can no longer assume low-value hardware means low-risk hardware.
The trend: Commodity electronics keep collapsing the cost of radio-based surveillance, turning mundane objects — chargers, screens, keyboards themselves — into keystroke-capture platforms that outpace vendors' encryption defaults.