Q.Briefly explain two threats that may arise due to a keylogger installed on a computer.

This is a plain theory question — it asks you to explain two threats, not to pick an option or write code.

A keylogger is a type of malicious software (or hardware device) that records every keystroke a user types on a keyboard. Once installed, it runs silently in the background, capturing everything you type without your knowledge. The danger is not the recording itself, but what an attacker does with that captured data.

Threat 1: Theft of credentials and sensitive data. Since a keylogger records every keystroke, it captures usernames, passwords, credit card numbers, PINs, and answers to security questions exactly as you type them. An attacker can then use these stolen credentials to log into your bank account, email, or social media, and carry out fraudulent transactions or identity theft. Even if you use a secure website (HTTPS), the keylogger captures the data before encryption, so the security of the connection does not protect you.

Threat 2: Privacy breach and surveillance. Beyond passwords, a keylogger records everything else you type — private messages, personal emails, confidential documents, or search queries. This constitutes a complete invasion of privacy. In a corporate or institutional setting, this could leak trade secrets, internal communications, or personal information of employees and customers, leading to legal liabilities, blackmail, or reputational damage. …

This is a plain theory question — it asks you to explain two threats, not to pick an option or write code. So the answer should be crisp, exam-ready paragraphs, each threat named and then explained with a concrete consequence.

The Idea: Why a Keylogger Is Dangerous

A keylogger is a piece of malware (or a hardware device) that silently records every key you press on the keyboard. The user has no idea it is running. Because it captures everything typed — not just what you type into a password field, but also your messages, search queries, and even the order in which you press keys — it gives an attacker a complete transcript of your digital life.

The danger is not the recording itself. The danger is what the attacker does with that recording. That is where the two threats come from.

Threat 1: Theft of Sensitive Data (Credential and Financial Theft)

Since the keylogger records every keystroke, it captures usernames, passwords, PINs, OTPs, credit/debit card numbers, and net-banking credentials the moment you type them. The attacker does not need to break into a server or guess a password — the user hands it over by typing.

The consequence is direct financial loss. With your bank login and OTP, the attacker can transfer money, make online purchases, or change your account details. Even if you use two-factor authentication, the OTP you type is also captured, so that layer of protection is bypassed. This is the most severe threat because it converts a silent recording into real monetary damage.

Threat 2: Privacy Invasion and Identity Theft

Beyond passwords, a keylogger records personal messages, emails, search history, and private documents typed on the machine. This is a complete invasion of privacy — the attacker learns your personal relationships, your health queries, your workplace communications, everything. …