How to Detect Keyloggers on a Mac

A keylogger is software that records everything you type. It can be used to steal passwords, credit card numbers, PIN numbers, bank accounts and personal information. Although Macs are infected with keyloggers less often than PCs, they are not immune to the problem. There are several ways to detect a keylogger, from simply reviewing the processes running on the computer to using a spyware-detection program.

Difficulty: Moderate

Instructions

1. Open the "Activity Monitor" in the "Utilities" folder under "Applications." This system tool will allow you to view the programs (processes) currently running on your computer.

2. Research any unfamiliar processes running in your "Activity Monitor." Critical system processes sometimes have unrecognizable names, however, and keyloggers may have a name that sounds legitimate. Do an Internet search to be safe.

3. Download and install TripWire or another intrusion-detection program. This type of software can be fairly difficult to use, but it will alert you when important configuration files are changed by a keylogger.

4. Download and install Little Snitch or another software firewall. This type of software alerts you when another program tries to connect to the Internet. It will detect a keylogger before it sends information over the Internet, and allow you to block it.

5. Purchase and install a spyware-detection program. Spyware-detection programs for Macs include MacScan and Internet Cleanup 5.0.

Tips & Warnings

• To prevent keylogger installation, be wary of what you download. Although Macs are typically more secure than Windows PCs, always download files with caution. Be careful about who has access to your computer. A keylogger can easily be installed onto a computer, and an inexperienced user might unknowingly download malware. One of the best ways to avoid keyloggers is to make sure that your Mac is updated and has an updated firewall running. OS and browser updates are especially important because they often include fixes for security problems. If you find a keylogger on your Mac, remove it to prevent information theft. Virus scanners and spyware-detection programs can remove most keyloggers, but if that doesn't work, you may need to re-install your OS.
• If you delete an important system process in the Activity Monitor, it could crash your computer or cause you to lose data. Always find out what a process is before acting on it. Some keyloggers are very hard to detect. The only way to be absolutely certain that your computer is free of malware is to perform a clean reinstall of the OS. This is an extreme measure, however, and should only be performed if you are fairly certain there is an undetected keylogger.

Resources

• Security Fixes & OS Updates for Macs