Comment on US dismantles laptop farm used by undercover North Korean IT workersparentComments−0cf8612b2e1e2ySurely a tuned KVM could impersonate a standard input hardware vendor (eg Logitech)?−alephnerd2yIt would both be very difficult and anomalous enough to be caught by a company's SOC.On the other hand, a long running Zoom session can remain undetected due to it's normality.−0cf8612b2e1e2yPeople emulate mice and keyboards from raspberry pis. I do not see why a KVM could not do the same. Or pretend it is a usbc docking station. Generic input devices do not have security keys.
Comments
Surely a tuned KVM could impersonate a standard input hardware vendor (eg Logitech)?
It would both be very difficult and anomalous enough to be caught by a company's SOC.
On the other hand, a long running Zoom session can remain undetected due to it's normality.
People emulate mice and keyboards from raspberry pis. I do not see why a KVM could not do the same. Or pretend it is a usbc docking station. Generic input devices do not have security keys.