Researchers have discovered that criminals can steal your password and other sensitive details, buy simply analysing the residual heat left by fingertips on a computer keyboard.

According to the research, it is possible for criminals to use a thermal camera to record heat signatures left by your hands. Criminals can detect the residual heat up to a minute after someone has touched the keys. 

The researches claim, that the hackers can wait for someone to step away from their computer before stealing sensitive data such as passwords, banking details and other data. The cyber attack has been branded as the 'thermanator'.

© University of California

The cyber attack was discovered by the scientists at the University of California, and have warned users to protect themselves from a possible 'thermanator' attack.

Study lead author Professor Gene Tsudik told Bleeping Computer (https://www.bleepingcomputer.com/news/security/thermanator-attack-steals-passwords-by-reading-thermal-residue-on-keyboards/), "It's a new attack that allows someone with a mid-range thermal camera to capture keys pressed on a normal keyboard, up to one minute after the victim enters them. If you type your password and walk or step away, someone can learn a lot about it after-the-fact.”

In order for such an attack to work, hackers will need to place a thermal camera within the vicinity of your laptop or computer keyboard. Footage from these cameras can be analysed to find your passwords and other information. 

© Pexels

During the study, a total of 31 participants were asked to enter their passwords on four types of keyboards. Eight non-experts were asked to analyse the footage and work out the keys that were pressed based on the heat signatures. The thermal recordings were clear enough for non-experts to identify and decipher user's passwords.

So, the next time when you are working in a cafe or in a public place, make sure of your surroundings and never leave your laptop unattended. 

Source: Bleeping Computer