Some legitimate apps and system components to monitor for keypresses in order to function correctly. Malware is not the only type of software that may install event taps on your system.
Wardle says that most macOS keyloggers rely on CoreGraphics 'event taps' to capture keystrokes, and that ReiKey was specifically designed to detect and alert whenever a new tap is added to the system. CoreGraphics is the framework that handles these low-level user input events.ĭeveloped by security researcher and macOS hacker Patrick Wardle, ReiKey is efficient against malware that uses CoreGraphics to achieve their purpose. Called ReiKey, the app can scan and monitor for software that installs keyboard event taps to intercept keystrokes.Įvent taps allow monitoring and filtering input events, like keyboard presses, before they pass to a foreground application. MacOS users have a new open source tool to help them identify generic keyloggers on their system.
