Hardware keylogger

All hardware keylogger devices have to have the following: Generally, recorded data is retrieved by typing a special password into a computer text editor.

Beyond text menu some keyloggers offer a high-speed download to speed up retrieval of stored data; this can be via USB mass-storage enumeration or with a USB or serial download adapter.

In cases in which the computer case is hidden from view (e.g. at some public access kiosks where the case is in a locked box and only a monitor, keyboard, and mouse are exposed to view) and the user has no possibility to run software checks, a user might thwart a keylogger by typing part of a password, using the mouse to move to a text editor or other window, typing some garbage text, mousing back to the password window, typing the next part of the password, etc.

[4] General keystroke logging countermeasures are also options against hardware keyloggers.

Thus, if the victim discovers the keylogger, they can then set up a sting operation to catch the person in the act of retrieving it.