Logitech's M185 and other popular wireless mice are vulnerable to MouseJack attacks

Polycount

Posts: 3,017   +590
Staff

Logitech sells some of the most popular gaming peripherals out there, as we've outlined multiple times in the past. Unfortunately, that can come with a few drawbacks from time to time.

When security vulnerabilities crop up, the effects can be even more disastrous due to their wide impact. As discovered by security researcher David Sopas, just such a vulnerability exists in one of Logitech's most well-known wireless mice: the M185.

Though far from high-end, the M185 is reasonably sturdy, long-lasting, and affordable at around $25. As you can imagine, those three selling points have made it the mouse of choice for those who travel frequently, or simply want a more minimalist mouse for basic tasks.

Background aside, the security flaw in question reportedly makes the M185 (and a wide array of other mice) vulnerable to "MouseJack" keystroke injection attacks.

For the unaware, MouseJack attacks are carried out by hackers using simple, low-cost radio devices that can transmit signals to a target mouse from "up to 100 meters away."

The attacker can then take control of a target mouse's computer, running scripts and entering commands with minimal effort. It's important to note that not all wireless mice are affected - Bluetooth devices, for example, are apparently safe from MouseJack attacks.

In Sopas' case, he hacked his own mouse and used the attack to display Windows' built-in calculator. Obviously, he wasn't keen on doing any real harm to his own system, so this was merely a proof of concept.

Unfortunately, short of using a different mouse, there doesn't appear to be much you can do to secure yourself against these attacks. There might be a firmware update available for your mouse to improve security, but that's not a guarantee for every model.

As such, consider this a warning if you happen to own the M185 or any other mice that are on MouseJack's affected devices list.

Permalink to story.

 
I prefer wired devices specifically because I don't like having to replace batteries.

Hacking is an issue I don't consider as often.
 
This would be for more for people who travel and not so much for those at home since the hacker would have to be fairly close. Unless you piss off the wrong guy lol
 
I prefer wired devices specifically because I don't like having to replace batteries.

Hacking is an issue I don't consider as often.
My wife uses this model with her laptop and gets about a year lifespan of the battery. Not really a big worry.
 
I prefer wired devices specifically because I don't like having to replace batteries.

Hacking is an issue I don't consider as often.

The lifespan on batteries has increased exponentially in the last few years with mobile phone technology along with the power usage on sensor's has decreased significantly.

For example, a AA battery in a G305 will last up to 6 months with heavy usage. I use a Logitech G Pro Wireless, and can game for 60 hours without charging, re-charging only takes 2 hours.
 
Back