---
id: 6076
title: "Malware development part 7 - Secure Desktop keylogger"
source_domain: 0xpat.github.io
source_url: "https://0xpat.github.io/Malware_development_part_7/"
published_at: "2021-01-29T00:00:00Z"
tags: ["privilege-escalation", "windows", "red-team", "malware-development", "keylogger", "secure-desktop", "winlogon"]
phying_url: "https://phying.com/item/6076"
lang: en
---

# Malware development part 7 - Secure Desktop keylogger

## Summary

Part 7 of the malware dev series builds a Secure Desktop keylogger: after escalating to SYSTEM, a low-level keyboard hook on the WINLOGON desktop captures credentials typed into UAC and logon prompts.

## Intelligence Metadata

- **Sources:** 0xpat.github.io
- **Published:** 2021-01-29T00:00:00Z
- **Original:** https://0xpat.github.io/Malware_development_part_7/
- **Phying News:** https://phying.com/item/6076